Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-21441 (GCVE-0-2026-21441)
Vulnerability from cvelistv5 – Published: 2026-01-07 22:09 – Updated: 2026-07-01 12:04
VLAI
EPSS
Title
urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
Summary
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Assigner
References
114 references
Impacted products
136 products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-21441",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-08T20:08:04.959214Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-08T20:08:22.320Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2026-01-23T09:07:22.785Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::server"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7::server"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:17.1",
"cpe:/a:redhat:openstack:17.1::el8"
],
"defaultStatus": "affected",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhui:4::el8"
],
"defaultStatus": "affected",
"product": "RHUI 4 for RHEL 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6.16::el8",
"cpe:/a:redhat:satellite_capsule:6.16::el8",
"cpe:/a:redhat:satellite_utils:6.16::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6.16 for RHEL 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6.16::el9",
"cpe:/a:redhat:satellite_capsule:6.16::el9",
"cpe:/a:redhat:satellite_utils:6.16::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6.16 for RHEL 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9",
"cpe:/a:redhat:satellite_capsule:6.18::el9",
"cpe:/a:redhat:satellite_maintenance:6.18::el9",
"cpe:/a:redhat:satellite_utils:6.18::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6.18 for RHEL 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream TUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.2::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.0::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.2::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_eus:9.4::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_eus:9.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::highavailability"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux HighAvailability (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::highavailability"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux High Availability AUS (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6::highavailability"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux High Availability E4S (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6::highavailability"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux High Availability TUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::highavailability"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux High Availability E4S (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8::highavailability"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux High Availability TUS (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::highavailability"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux High Availability E4S (v.9.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::highavailability"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux High Availability E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::highavailability"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux High Availability EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.4.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"product": "Multicluster Global Hub 1.5.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:network_observ_optr:1.11::el9"
],
"defaultStatus": "affected",
"product": "Network Observability (NETOBSERV) 1.11.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.2::el9"
],
"defaultStatus": "affected",
"product": "Red Hat AI Inference Server 3.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.4::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2.4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2.5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ceph_storage:7.1::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Ceph Storage 7.1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ceph_storage:8::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Ceph Storage 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ceph_storage:9::el10"
],
"defaultStatus": "affected",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.26::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Dev Spaces (RHOSDS) 3.26",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.17::el8"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift GitOps 1.17",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.18::el8"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift GitOps 1.18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.19::el8"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift GitOps 1.19",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.13::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.13",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.14::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6.18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.2::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Trusted Artifact Signer 1.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::resilientstorage"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux ResilientStorage (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::resilientstorage"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux ResilientStorage E4S (v.9.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::resilientstorage"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::resilientstorage"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Resilient Storage EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1.0::el9"
],
"defaultStatus": "affected",
"product": "Zero Trust Workload Identity Manager 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:cert_manager:1.18::el9"
],
"defaultStatus": "affected",
"product": "cert-manager operator for Red Hat OpenShift 1.18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:mirror_registry:2.0::el8"
],
"defaultStatus": "affected",
"product": "mirror registry for Red Hat OpenShift 2.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "affected",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2"
],
"defaultStatus": "affected",
"product": "Migration Toolkit for Virtualization",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multiarch_tuning_operator"
],
"defaultStatus": "affected",
"product": "Multiarch Tuning Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ai_inference_server:3"
],
"defaultStatus": "affected",
"product": "Red Hat AI Inference Server",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ansible_core:2"
],
"defaultStatus": "affected",
"product": "Red Hat Ansible Automation Platform Ansible Core 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quarkus:3"
],
"defaultStatus": "affected",
"product": "Red Hat build of Quarkus Native builder",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhdh:1"
],
"defaultStatus": "affected",
"product": "Red Hat Developer Hub",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:edge_manager:0"
],
"defaultStatus": "affected",
"product": "Red Hat Edge Manager preview",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:offline_knowledge_portal:1"
],
"defaultStatus": "affected",
"product": "Red Hat Offline Knowledge Portal",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "unaffected",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "unaffected",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:dynamic_accelerator_slicer:1"
],
"defaultStatus": "unaffected",
"product": "Dynamic Accelerator Slicer Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:external_secrets_operator:0"
],
"defaultStatus": "unaffected",
"product": "external secrets operator for Red Hat OpenShift - Tech Preview",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "unaffected",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1"
],
"defaultStatus": "unaffected",
"product": "OpenShift API for Data Protection",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unaffected",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift_update_service:5"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenShift Update Service",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:13"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenStack Platform 13 (Queens)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:workload_availability_snr:0"
],
"defaultStatus": "unaffected",
"product": "Self Node Remediation Operator",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:stf:1.5"
],
"defaultStatus": "unaffected",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat"
}
],
"datePublic": "2026-01-07T22:09:01.936Z",
"descriptions": [
{
"lang": "en",
"value": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-409",
"description": "Improper Handling of Highly Compressed Data (Data Amplification)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-01T12:04:45.313Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"name": "RHBZ#2427726",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2911"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1485"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2765"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2764"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2760"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1240"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1224"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1226"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1803"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1792"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1791"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1676"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1734"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1735"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1546"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1717"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1957"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1706"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1704"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1619"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1239"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1089"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1088"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1726"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1086"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1254"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2728"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2723"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2717"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2718"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1618"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1693"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1674"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1729"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1087"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1241"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1805"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1793"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1794"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2500"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2256"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2900"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3444"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3461"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3462"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25127"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4466"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4467"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1599"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1609"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1596"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3960"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33154"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1652"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3406"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1736"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10184"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3782"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2106"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3713"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2456"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3869"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3874"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3884"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1730"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4185"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4215"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1942"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1504"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8500"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6292"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14877"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8501"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2924"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2926"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2925"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2919"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2137"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:4271"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:3296"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2144"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2139"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2126"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5459"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:2563"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17456"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17457"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17460"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17461"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17462"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17463"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1038"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1166"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:0981"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1176"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1041"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1168"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:0990"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:1042"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28441"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:2911: Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS), Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:28043: Red Hat OpenStack Platform 17.1"
},
{
"lang": "en",
"value": "RHSA-2026:1485: RHUI 4 for RHEL 8"
},
{
"lang": "en",
"value": "RHSA-2026:2765: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:2764: Red Hat Satellite 6.17 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:2760: Red Hat Satellite 6.18 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:1240: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux HighAvailability (v. 8), Red Hat Enterprise Linux ResilientStorage (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:1224: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:1226: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:1803: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4), Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:1792: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6), Red Hat Enterprise Linux High Availability E4S (v.8.6), Red Hat Enterprise Linux High Availability TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:1791: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8), Red Hat Enterprise Linux High Availability E4S (v.8.8), Red Hat Enterprise Linux High Availability TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:1676: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:1734: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux High Availability E4S (v.9.0), Red Hat Enterprise Linux ResilientStorage E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:1735: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux High Availability E4S (v.9.2), Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:1546: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:1717: Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux High Availability EUS (v.9.4), Red Hat Enterprise Linux Resilient Storage EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:1712: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:1957: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:1706: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:1704: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:1619: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:1239: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:1089: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:1088: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:1726: Red Hat Enterprise Linux BaseOS EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:1086: Red Hat Enterprise Linux BaseOS (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:1254: Red Hat Enterprise Linux BaseOS (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:2728: Red Hat Enterprise Linux BaseOS AUS (v. 8.2)"
},
{
"lang": "en",
"value": "RHSA-2026:2723: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:2717: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:2718: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:1618: Red Hat Enterprise Linux BaseOS E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:1693: Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:1674: Red Hat Enterprise Linux BaseOS EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:1729: Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:1087: Red Hat Enterprise Linux BaseOS (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:1241: Red Hat Enterprise Linux HighAvailability (v. 8), Red Hat Enterprise Linux ResilientStorage (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:1805: Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:1793: Red Hat Enterprise Linux High Availability E4S (v.8.6), Red Hat Enterprise Linux High Availability TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:1794: Red Hat Enterprise Linux High Availability E4S (v.8.8), Red Hat Enterprise Linux High Availability TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:2500: Multicluster Global Hub 1.4.5"
},
{
"lang": "en",
"value": "RHSA-2026:2256: Multicluster Global Hub 1.5.4"
},
{
"lang": "en",
"value": "RHSA-2026:2900: Network Observability (NETOBSERV) 1.11.2"
},
{
"lang": "en",
"value": "RHSA-2026:3444: OpenShift API for Data Protection 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:3461: Red Hat AI Inference Server 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:3462: Red Hat AI Inference Server 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:8151: Red Hat Advanced Cluster Management for Kubernetes 2.15"
},
{
"lang": "en",
"value": "RHSA-2026:4466: Red Hat Advanced Cluster Security for Kubernetes 4.8"
},
{
"lang": "en",
"value": "RHSA-2026:4467: Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:1599: Red Hat Ansible Automation Platform 2.4"
},
{
"lang": "en",
"value": "RHSA-2026:1609: Red Hat Ansible Automation Platform 2.5"
},
{
"lang": "en",
"value": "RHSA-2026:1596: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:3960: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:33154: Red Hat Ceph Storage 7.1"
},
{
"lang": "en",
"value": "RHSA-2026:1652: Red Hat Ceph Storage 8"
},
{
"lang": "en",
"value": "RHSA-2026:3406: Red Hat Ceph Storage 9"
},
{
"lang": "en",
"value": "RHSA-2026:1736: Red Hat Discovery 2"
},
{
"lang": "en",
"value": "RHSA-2026:10184: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:3782: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:2695: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:2106: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:3713: Red Hat OpenShift AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:2456: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26"
},
{
"lang": "en",
"value": "RHSA-2026:3869: Red Hat OpenShift GitOps 1.17"
},
{
"lang": "en",
"value": "RHSA-2026:3874: Red Hat OpenShift GitOps 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:3884: Red Hat OpenShift GitOps 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:2762: Red Hat Quay 3.10"
},
{
"lang": "en",
"value": "RHSA-2026:1730: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:4185: Red Hat Quay 3.13"
},
{
"lang": "en",
"value": "RHSA-2026:4215: Red Hat Quay 3.14"
},
{
"lang": "en",
"value": "RHSA-2026:1942: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:2681: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:1504: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:6287: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:8500: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:6292: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:14877: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:8501: Red Hat Satellite 6.18"
},
{
"lang": "en",
"value": "RHSA-2026:2924: Red Hat Trusted Artifact Signer 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:2926: Red Hat Trusted Artifact Signer 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:2925: Red Hat Trusted Artifact Signer 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:2919: Red Hat Trusted Artifact Signer 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:2137: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:4271: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:3296: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:2144: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:2139: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:2126: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:5459: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:2563: Red Hat Update Infrastructure 5"
},
{
"lang": "en",
"value": "RHSA-2026:17456: Zero Trust Workload Identity Manager 1"
},
{
"lang": "en",
"value": "RHSA-2026:17457: Zero Trust Workload Identity Manager 1"
},
{
"lang": "en",
"value": "RHSA-2026:17460: Zero Trust Workload Identity Manager 1"
},
{
"lang": "en",
"value": "RHSA-2026:17461: Zero Trust Workload Identity Manager 1"
},
{
"lang": "en",
"value": "RHSA-2026:17462: Zero Trust Workload Identity Manager 1"
},
{
"lang": "en",
"value": "RHSA-2026:17463: Zero Trust Workload Identity Manager 1"
},
{
"lang": "en",
"value": "RHSA-2026:1038: cert-manager operator for Red Hat OpenShift 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:1166: cert-manager operator for Red Hat OpenShift 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:0981: cert-manager operator for Red Hat OpenShift 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:1176: cert-manager operator for Red Hat OpenShift 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:1041: cert-manager operator for Red Hat OpenShift 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:1168: cert-manager operator for Red Hat OpenShift 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:0990: cert-manager operator for Red Hat OpenShift 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:1042: cert-manager operator for Red Hat OpenShift 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:28441: mirror registry for Red Hat OpenShift 2.0"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-01-07T23:01:59.422Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-01-07T22:09:01.936Z",
"value": "Made public."
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "urllib3",
"vendor": "urllib3",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.22, \u003c 2.6.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 8.9,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-409",
"description": "CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-07T22:13:57.482Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
},
{
"name": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
}
],
"source": {
"advisory": "GHSA-38jv-5279-wg99",
"discovery": "UNKNOWN"
},
"title": "urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-21441",
"datePublished": "2026-01-07T22:09:01.936Z",
"dateReserved": "2025-12-29T03:00:29.276Z",
"dateUpdated": "2026-07-01T12:04:45.313Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-21441",
"date": "2026-07-01",
"epss": "0.02667",
"percentile": "0.8388"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-21441\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-01-07T22:15:44.040\",\"lastModified\":\"2026-07-01T13:16:47.980\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.\"},{\"lang\":\"es\",\"value\":\"urllib3 es una biblioteca cliente HTTP para Python. La API de streaming de urllib3 est\u00e1 dise\u00f1ada para el manejo eficiente de grandes respuestas HTTP leyendo el contenido en fragmentos, en lugar de cargar el cuerpo completo de la respuesta en la memoria de una sola vez. urllib3 puede realizar decodificaci\u00f3n o descompresi\u00f3n bas\u00e1ndose en el encabezado HTTP \u0027Content-Encoding\u0027 (por ejemplo, \u0027gzip\u0027, \u0027deflate\u0027, \u0027br\u0027 o \u0027zstd\u0027). Al usar la API de streaming, la biblioteca descomprime solo los bytes necesarios, permitiendo el consumo parcial del contenido. A partir de la versi\u00f3n 1.22 y antes de la versi\u00f3n 2.6.3, para las respuestas de redirecci\u00f3n HTTP, la biblioteca leer\u00eda el cuerpo completo de la respuesta para vaciar la conexi\u00f3n y descomprimir el contenido innecesariamente. Esta descompresi\u00f3n ocurr\u00eda incluso antes de que se llamara a cualquier m\u00e9todo de lectura, y los l\u00edmites de lectura configurados no restring\u00edan la cantidad de datos descomprimidos. Como resultado, no hab\u00eda ninguna salvaguarda contra las bombas de descompresi\u00f3n. Un servidor malicioso podr\u00eda explotar esto para desencadenar un consumo excesivo de recursos en el cliente. Las aplicaciones y bibliotecas se ven afectadas cuando transmiten contenido de fuentes no confiables al establecer \u0027preload_content=False\u0027 cuando no deshabilitan las redirecciones. Los usuarios deber\u00edan actualizar al menos a urllib3 v2.6.3, en la cual la biblioteca no decodifica el contenido de las respuestas de redirecci\u00f3n cuando \u0027preload_content=False\u0027. Si la actualizaci\u00f3n no es posible de inmediato, deshabilite las redirecciones estableciendo \u0027redirect=False\u0027 para las solicitudes a fuentes no confiables.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"urllib3\",\"product\":\"urllib3\",\"versions\":[{\"version\":\"\u003e= 1.22, \u003c 2.6.3\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7::server\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7::server\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\",\"cpe:/a:redhat:openstack:17.1::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"RHUI 4 for RHEL 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhui:4::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el8\",\"cpe:/a:redhat:satellite_capsule:6.16::el8\",\"cpe:/a:redhat:satellite_utils:6.16::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el9\",\"cpe:/a:redhat:satellite_capsule:6.16::el9\",\"cpe:/a:redhat:satellite_utils:6.16::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.17 for RHEL 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6.17::el9\",\"cpe:/a:redhat:satellite_capsule:6.17::el9\",\"cpe:/a:redhat:satellite_utils:6.17::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18 for RHEL 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\",\"cpe:/a:redhat:satellite_capsule:6.18::el9\",\"cpe:/a:redhat:satellite_maintenance:6.18::el9\",\"cpe:/a:redhat:satellite_utils:6.18::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream AUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream TUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream TUS (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS AUS (v. 8.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.2::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS AUS (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.4::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS AUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS TUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS TUS (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.8::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.9.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.0::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.2::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_eus:9.4::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_eus:9.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux HighAvailability (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::highavailability\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux High Availability AUS (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::highavailability\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux High Availability E4S (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6::highavailability\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux High Availability TUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6::highavailability\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux High Availability E4S (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::highavailability\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux High Availability TUS (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8::highavailability\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux High Availability E4S (v.9.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::highavailability\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux High Availability E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::highavailability\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux High Availability EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::highavailability\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.4.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability (NETOBSERV) 1.11.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1.11::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.2::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.4::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 7.1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:7.1::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:8::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9::el10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.26::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.17\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.17::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.18::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.19\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.19::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.13\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.13::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.14::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.2::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux ResilientStorage (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::resilientstorage\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux ResilientStorage E4S (v.9.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::resilientstorage\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::resilientstorage\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Resilient Storage EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::resilientstorage\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1.0::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager operator for Red Hat OpenShift 1.18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1.18::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2.0\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2.0::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multiarch Tuning Operator\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multiarch_tuning_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform Ansible Core 2\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ansible_core:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Quarkus Native builder\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:quarkus:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhdh:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager preview\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:edge_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Offline Knowledge Portal\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:offline_knowledge_portal:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Dynamic Accelerator Slicer Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:dynamic_accelerator_slicer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"external secrets operator for Red Hat OpenShift - Tech Preview\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Update Service\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openshift_update_service:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 13 (Queens)\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openstack:13\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self Node Remediation Operator\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:workload_availability_snr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:/a:redhat:stf:1.5\"]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.9,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"HIGH\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-01-08T20:08:04.959214Z\",\"id\":\"CVE-2026-21441\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-409\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-409\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:python:urllib3:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.22\",\"versionEndExcluding\":\"2.6.3\",\"matchCriteriaId\":\"845B6572-3E64-421E-9A0C-F94E5ED7A95B\"}]}]}],\"references\":[{\"url\":\"https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:0981\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:0990\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10184\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1038\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1041\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1042\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1086\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1087\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1088\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1089\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1166\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1168\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1176\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1224\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1226\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1239\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1240\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1241\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1254\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1485\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14877\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1504\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1546\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1596\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1599\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1609\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1618\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1619\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1652\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1674\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1676\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1693\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1704\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1706\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1717\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1726\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1729\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1730\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1734\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1736\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17456\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17457\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17460\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17461\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17462\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17463\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1791\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1792\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1793\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1794\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1803\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1805\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1942\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1957\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2106\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2126\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2137\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2139\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2144\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2256\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2456\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2500\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25127\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2563\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2681\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2695\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2717\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2718\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2723\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2728\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2760\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2762\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2764\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2765\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2900\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2911\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2919\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2924\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2925\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:2926\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3296\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33154\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3406\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3444\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3461\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3462\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3713\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3782\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3869\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3874\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3884\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3960\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4185\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4215\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4271\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4466\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4467\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5459\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6292\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8500\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8501\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-21441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2427726\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-01-23T09:07:22.785Z\"}}, {\"title\": \"urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7::server\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7::server\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\", \"cpe:/a:redhat:openstack:17.1::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:4::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHUI 4 for RHEL 8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el8\", \"cpe:/a:redhat:satellite_capsule:6.16::el8\", \"cpe:/a:redhat:satellite_utils:6.16::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el9\", \"cpe:/a:redhat:satellite_capsule:6.16::el9\", \"cpe:/a:redhat:satellite_utils:6.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\", \"cpe:/a:redhat:satellite_capsule:6.18::el9\", \"cpe:/a:redhat:satellite_maintenance:6.18::el9\", \"cpe:/a:redhat:satellite_utils:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18 for RHEL 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream AUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream TUS (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS AUS (v. 8.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS AUS (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS AUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS TUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS TUS (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.0::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus:9.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus:9.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux HighAvailability (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux High Availability AUS (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux High Availability E4S (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux High Availability TUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux High Availability E4S (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux High Availability TUS (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux High Availability E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux High Availability E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux High Availability EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.4.5\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.5.4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability (NETOBSERV) 1.11.2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.4::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:7.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 7.1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.26::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.17::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.17\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.18\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.19\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.13::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.13\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.14::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.14\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::resilientstorage\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux ResilientStorage (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::resilientstorage\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux ResilientStorage E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::resilientstorage\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::resilientstorage\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Resilient Storage EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager 1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager operator for Red Hat OpenShift 1.18\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2.0\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multiarch_tuning_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Multiarch Tuning Operator\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_core:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform Ansible Core 2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quarkus:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Quarkus Native builder\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:certifications:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Certification Program for Red Hat Enterprise Linux 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager preview\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:offline_knowledge_portal:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Offline Knowledge Portal\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:dynamic_accelerator_slicer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Dynamic Accelerator Slicer Operator for Red Hat OpenShift\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:0\"], \"vendor\": \"Red Hat\", \"product\": \"external secrets operator for Red Hat OpenShift - Tech Preview\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_update_service:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Update Service\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:13\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 13 (Queens)\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_snr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Self Node Remediation Operator\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5\"], \"vendor\": \"Red Hat\", \"product\": \"Service Telemetry Framework 1.5\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-01-07T23:01:59.422Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-01-07T22:09:01.936Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:2911: Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS), Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28043: Red Hat OpenStack Platform 17.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1485: RHUI 4 for RHEL 8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2765: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2764: Red Hat Satellite 6.17 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2760: Red Hat Satellite 6.18 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1240: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux HighAvailability (v. 8), Red Hat Enterprise Linux ResilientStorage (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1224: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1226: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1803: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4), Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1792: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6), Red Hat Enterprise Linux High Availability E4S (v.8.6), Red Hat Enterprise Linux High Availability TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1791: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8), Red Hat Enterprise Linux High Availability E4S (v.8.8), Red Hat Enterprise Linux High Availability TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1676: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1734: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux High Availability E4S (v.9.0), Red Hat Enterprise Linux ResilientStorage E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1735: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux High Availability E4S (v.9.2), Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1546: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1717: Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux High Availability EUS (v.9.4), Red Hat Enterprise Linux Resilient Storage EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1712: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1957: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1706: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1704: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1619: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1239: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1089: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1088: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1726: Red Hat Enterprise Linux BaseOS EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1086: Red Hat Enterprise Linux BaseOS (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1254: Red Hat Enterprise Linux BaseOS (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2728: Red Hat Enterprise Linux BaseOS AUS (v. 8.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2723: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2717: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2718: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1618: Red Hat Enterprise Linux BaseOS E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1693: Red Hat Enterprise Linux BaseOS E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1674: Red Hat Enterprise Linux BaseOS EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1729: Red Hat Enterprise Linux BaseOS EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1087: Red Hat Enterprise Linux BaseOS (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1241: Red Hat Enterprise Linux HighAvailability (v. 8), Red Hat Enterprise Linux ResilientStorage (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1805: Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1793: Red Hat Enterprise Linux High Availability E4S (v.8.6), Red Hat Enterprise Linux High Availability TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1794: Red Hat Enterprise Linux High Availability E4S (v.8.8), Red Hat Enterprise Linux High Availability TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2500: Multicluster Global Hub 1.4.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2256: Multicluster Global Hub 1.5.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2900: Network Observability (NETOBSERV) 1.11.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3444: OpenShift API for Data Protection 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3461: Red Hat AI Inference Server 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3462: Red Hat AI Inference Server 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8151: Red Hat Advanced Cluster Management for Kubernetes 2.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:4466: Red Hat Advanced Cluster Security for Kubernetes 4.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:4467: Red Hat Advanced Cluster Security for Kubernetes 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1599: Red Hat Ansible Automation Platform 2.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1609: Red Hat Ansible Automation Platform 2.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1596: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3960: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33154: Red Hat Ceph Storage 7.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1652: Red Hat Ceph Storage 8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3406: Red Hat Ceph Storage 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1736: Red Hat Discovery 2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10184: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3782: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2695: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2106: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19712: Red Hat OpenShift AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3713: Red Hat OpenShift AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2456: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3869: Red Hat OpenShift GitOps 1.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3874: Red Hat OpenShift GitOps 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3884: Red Hat OpenShift GitOps 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1730: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:4185: Red Hat Quay 3.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:4215: Red Hat Quay 3.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1942: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2681: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2762: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1504: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6287: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8500: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6292: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14877: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8501: Red Hat Satellite 6.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2924: Red Hat Trusted Artifact Signer 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2926: Red Hat Trusted Artifact Signer 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2925: Red Hat Trusted Artifact Signer 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2919: Red Hat Trusted Artifact Signer 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2137: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:4271: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:3296: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2144: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2139: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2126: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:5459: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:2563: Red Hat Update Infrastructure 5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17456: Zero Trust Workload Identity Manager 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17457: Zero Trust Workload Identity Manager 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17460: Zero Trust Workload Identity Manager 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17461: Zero Trust Workload Identity Manager 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17462: Zero Trust Workload Identity Manager 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17463: Zero Trust Workload Identity Manager 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1038: cert-manager operator for Red Hat OpenShift 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1166: cert-manager operator for Red Hat OpenShift 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:0981: cert-manager operator for Red Hat OpenShift 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1176: cert-manager operator for Red Hat OpenShift 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1041: cert-manager operator for Red Hat OpenShift 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1168: cert-manager operator for Red Hat OpenShift 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:0990: cert-manager operator for Red Hat OpenShift 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:1042: cert-manager operator for Red Hat OpenShift 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28441: mirror registry for Red Hat OpenShift 2.0\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-01-07T22:09:01.936Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-21441\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2427726\", \"name\": \"RHBZ#2427726\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2911\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1485\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2765\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2764\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2760\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1240\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1224\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1226\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1803\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1792\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1791\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1676\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1734\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1735\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1546\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1717\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1957\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1706\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1704\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1619\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1239\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1089\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1088\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1726\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1086\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1254\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2728\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2723\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2717\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2718\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1618\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1693\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1674\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1729\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1087\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1241\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1805\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1793\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1794\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2500\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2256\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2900\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3444\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3461\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3462\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25127\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:4466\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:4467\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1599\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1609\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1596\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3960\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33154\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1652\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3406\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1736\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10184\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3782\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2695\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2106\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3713\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2456\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3869\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3874\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3884\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1730\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:4185\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:4215\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1942\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2681\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2762\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1504\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6287\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8500\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6292\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14877\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8501\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2924\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2926\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2925\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2919\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2137\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:4271\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3296\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2144\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2139\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2126\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5459\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:2563\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17456\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17457\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17460\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17461\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17462\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17463\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1038\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1166\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:0981\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1176\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1041\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1168\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:0990\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1042\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28441\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-409\", \"description\": \"Improper Handling of Highly Compressed Data (Data Amplification)\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-06-30T02:41:38.991Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-21441\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-01-08T20:08:04.959214Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-01-08T20:08:12.306Z\"}}], \"cna\": {\"title\": \"urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)\", \"source\": {\"advisory\": \"GHSA-38jv-5279-wg99\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 8.9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"PRESENT\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"HIGH\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"urllib3\", \"product\": \"urllib3\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 1.22, \u003c 2.6.3\"}]}], \"references\": [{\"url\": \"https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99\", \"name\": \"https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b\", \"name\": \"https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-409\", \"description\": \"CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-01-07T22:13:57.482Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-21441\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-30T02:41:38.991Z\", \"dateReserved\": \"2025-12-29T03:00:29.276Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-01-07T22:09:01.936Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:2681
Vulnerability from csaf_redhat - Published: 2026-02-12 17:29 - Updated: 2026-07-01 21:42Summary
Red Hat Security Advisory: Red Hat Quay 3.16.2
Severity
Important
Notes
Topic: Red Hat Quay 3.16.2 is now available with bug fixes.
Details: Quay 3.16.2
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This flaw exploits an issue with how masked paths are implementedin runc. When masking files, runc will bind-mount the container's /dev/null inode on top of the file. However, if an attacker can replace /dev/null with a symlink to some other procfs file, runc will instead bind-mount the symlink target read-write.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Threats
Impact
Important
A flaw was found in auth0/node-jws. This vulnerability allows improper signature verification via using the HS256 (Hash-based Message Authentication Code using SHA-256) algorithm under specific conditions, where applications use the jws.createVerify() function for HMAC (Keyed-Hash Message Authentication Code) algorithms and user-provided data from the JSON (JavaScript Object Notation) Web Signature protected header or payload in HMAC secret lookup routines.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Threats
Impact
Important
A path traversal flaw has been discovered in the python wheel too. The unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x | — |
Workaround
|
Threats
Impact
Important
References
104 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.16.2 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.16.2",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:2681",
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-34156",
"url": "https://access.redhat.com/security/cve/CVE-2024-34156"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45337",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45338",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-31133",
"url": "https://access.redhat.com/security/cve/CVE-2025-31133"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-65945",
"url": "https://access.redhat.com/security/cve/CVE-2025-65945"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-24049",
"url": "https://access.redhat.com/security/cve/CVE-2026-24049"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2681.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.16.2",
"tracking": {
"current_release_date": "2026-07-01T21:42:17+00:00",
"generator": {
"date": "2026-07-01T21:42:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:2681",
"initial_release_date": "2026-02-12T17:29:21+00:00",
"revision_history": [
{
"date": "2026-02-12T17:29:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-02-16T18:38:34+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:42:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.16",
"product": {
"name": "Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816239"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770762347"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Adda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770817752"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770230686"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816381"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Afa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770841176"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816415"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770836901"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Ae3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770762347"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Ac96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Aafe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816381"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816415"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770836901"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770762347"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Abf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816381"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Abbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770816415"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770836901"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770836901"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-34156",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-09-06T21:20:09.377905+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310528"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Go\u0027s `encoding/gob` package is of high severity because it exposes applications to potential Denial of Service (DoS) attacks through stack exhaustion. Since `gob` relies on recursive function calls to decode nested structures, an attacker could exploit this by sending crafted messages with excessively deep nesting, causing the application to panic due to stack overflow. This risk is particularly important in scenarios where untrusted or external input is processed, as it can lead to system unavailability or crashes, undermining the reliability and availability of services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-34156"
},
{
"category": "external",
"summary": "RHBZ#2310528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-34156",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34156"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34156",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34156"
},
{
"category": "external",
"summary": "https://go.dev/cl/611239",
"url": "https://go.dev/cl/611239"
},
{
"category": "external",
"summary": "https://go.dev/issue/69139",
"url": "https://go.dev/issue/69139"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk",
"url": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3106",
"url": "https://pkg.go.dev/vuln/GO-2024-3106"
}
],
"release_date": "2024-09-06T21:15:12.020000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion"
},
{
"cve": "CVE-2024-45337",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2024-12-11T19:00:54.247490+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2331720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application\u0027s handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 \u0026 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "RHBZ#2331720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
"url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
},
{
"category": "external",
"summary": "https://go.dev/cl/635315",
"url": "https://go.dev/cl/635315"
},
{
"category": "external",
"summary": "https://go.dev/issue/70779",
"url": "https://go.dev/issue/70779"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
"url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3321",
"url": "https://pkg.go.dev/vuln/GO-2024-3321"
}
],
"release_date": "2024-12-11T18:55:58.506000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
},
{
"cve": "CVE-2024-45338",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2024-12-18T21:00:59.938173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an attacker can craft malicious input that causes the parsing functions to process data non-linearly, resulting in significant delays which leads to a denial of service by exhausting system resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "RHBZ#2333122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45338",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://go.dev/cl/637536",
"url": "https://go.dev/cl/637536"
},
{
"category": "external",
"summary": "https://go.dev/issue/70906",
"url": "https://go.dev/issue/70906"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ",
"url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3333",
"url": "https://pkg.go.dev/vuln/GO-2024-3333"
}
],
"release_date": "2024-12-18T20:38:22.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-31133",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:17:18.235000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404705"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This flaw exploits an issue with how masked paths are implementedin runc. When masking files, runc will bind-mount the container\u0027s /dev/null inode on top of the file. However, if an attacker can replace /dev/null with a symlink to some other procfs file, runc will instead bind-mount the symlink target read-write.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: container escape via \u0027masked path\u0027 abuse due to mount race conditions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-31133"
},
{
"category": "external",
"summary": "RHBZ#2404705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404705"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-31133",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31133"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-31133",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31133"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2"
}
],
"release_date": "2025-11-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using user namespaces, with the host root user not mapped into the container\u0027s namespace. procfs file permissions are managed using Unix\nDAC and thus user namespaces stop a container process from being able to write to them.\n\n* Not running as a root user in the container (this includes disabling setuid binaries with noNewPrivileges). As above, procfs file permissions are managed using Unix DAC and thus non-root users cannot write to them.\n\n* Depending on the maskedPath configuration (the default configuratio nonly masks paths in /proc and /sys), using an AppArmor that blocks unexpectedwrites to any maskedPaths (as is the case with the defaultprofile used by Docker and Podman) will block attempts to exploit this issue. However, CVE-2025-52881 allows an attacker to bypass LSMlabels, and so this mitigation is not helpful when considered incombination with CVE-2025-52881.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: container escape via \u0027masked path\u0027 abuse due to mount race conditions"
},
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-65945",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2025-12-04T19:01:14.733682+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418904"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in auth0/node-jws. This vulnerability allows improper signature verification via using the HS256 (Hash-based Message Authentication Code using SHA-256) algorithm under specific conditions, where applications use the jws.createVerify() function for HMAC (Keyed-Hash Message Authentication Code) algorithms and user-provided data from the JSON (JavaScript Object Notation) Web Signature protected header or payload in HMAC secret lookup routines.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-65945"
},
{
"category": "external",
"summary": "RHBZ#2418904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418904"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-65945",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-65945"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-65945",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-65945"
},
{
"category": "external",
"summary": "https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e",
"url": "https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e"
},
{
"category": "external",
"summary": "https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x",
"url": "https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x"
}
],
"release_date": "2025-12-04T18:45:37.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm"
},
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
},
{
"cve": "CVE-2026-24049",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-22T05:00:54.709179+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431959"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal flaw has been discovered in the python wheel too. The unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24049"
},
{
"category": "external",
"summary": "RHBZ#2431959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24049"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24049",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24049"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef",
"url": "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/releases/tag/0.46.2",
"url": "https://github.com/pypa/wheel/releases/tag/0.46.2"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx",
"url": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx"
}
],
"release_date": "2026-01-22T04:02:08.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T17:29:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2681"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:9784029a9d44a605dd28583416a7322c84189f4ee8e1bfa1be822d9260639d35_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:afe2137c2002e07f27b105b9db90030ca0f3347a038ab8418d257dabe7aefcd1_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:bf85b1b91bcbaea8cb0fc021d1f590ba3da4e0b2f8703cb449791ece5930d68c_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:dda553368706ad66215cc95b9b0306808531b0ed92b7dc7880cd2c95f8e0faed_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3b252ccf24df27ea02a005d734eb501abf989b97b5d9e3ff57aa3b7e9633f165_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:5eb5f4aafd4fa3b53c6477424946f743bf5236ac434ddffa8a887a26a47e0fab_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:c96f472d44fff765175c4ee77ddb94bfac580105900f5e21274e959099bb97fa_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6ac48cf92c9bb3d6eac9645ef203bcd2e475da36c182eed9ceadc3490e77a042_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:146699ff1cd4f8fdf19594ad5ce11dcafe9f8a266c94b104826c871b675f92e1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:76354449e4e8b67bfbbfae10337b7d50fc657c909c8798fddb95dee408c3a9f2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8166562a51177faff8e520980153e1760a4863417a824ac15deb4314afcf1925_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:77387c33232561396c8826a393d17771bf88aaad90436c4e1e5aa36891840b16_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:1f03a49fec5f575e98c3f37ee081d5510a87172e72bc66627f935314d11a67c4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9969081b9da11f5a56d3ebf9ccd9428d9d59741c058abe4510e7ae3375a11519_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:e3ab3a505d3d08f7bad3c899f40727e2de524cd14c4c44b00f44b7b42f7ddd21_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:fa64c1d47fc10d14120ec9e7afc2e253620fdc28592f4d859350db4fbdf0fae2_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:64adacf9cccd05601f4a7b38a7cd55d55291583dc9d33e4cfd1e4fd426cd0936_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:8a1b8eedcb8e36ddfb1982062ad379c4f65f95260545d05d0cf10918427089d8_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:bbbd11d9b959ef12ae61a7975ffb08541797b0fad2d098781ec4543fd4ac2893_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:35e3dc29e64bae8c0b35d7884281397c58165a5b145676919452a02b9f56ee4c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:45de5fc478cb2734b672630c67ffee4e6b98954848b97ea9a1cc9903a53dbf8e_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:96588daff01f27db2ee335dcd957e9dec7f38a2c573e2968d9bc5835edc2957b_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:9f58fc80db29fa44684c6e39bb2eda06e86ba34801d5e04468941ac8d0b754eb_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking"
}
]
}
RHSA-2026:2695
Vulnerability from csaf_redhat - Published: 2026-02-12 22:43 - Updated: 2026-07-01 21:42Summary
Red Hat Security Advisory: RHOAI 2.25.2 - Red Hat OpenShift AI
Severity
Important
Notes
Topic: Updated images are now available for Red Hat OpenShift AI.
Details: Release of RHOAI 2.25.2 provides these changes:
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
87 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Hugging Face Accelerate. A remote attacker can achieve arbitrary code execution by exploiting a deserialization of untrusted data vulnerability. This occurs when the target visits a malicious page or opens a malicious file, leading to improper validation of user-supplied data during the parsing of checkpoints. Successful exploitation allows the attacker to execute code in the context of the current process.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
94 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Workaround
|
Threats
Impact
Important
This vulnerability in fontTools varLib allows a crafted .designspace file to trigger arbitrary file writes and XML-based content injection during variable-font generation. Because filenames are not sanitized, an attacker can use path traversal to overwrite files anywhere on the filesystem, and malicious payloads embedded in XML labelname elements can be injected directly into the generated output. When these overwritten files reside in executable or web-served locations, this can enable local remote-code execution or corruption of application or configuration files. The issue affects the varLib CLI and any code that invokes fontTools.varLib.main().
6.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
94 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Vendor Fix
fix
|
Known not affected
77 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Vendor Fix
fix
|
Known not affected
88 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Threats
Impact
Important
A path traversal and arbitrary file overwrite vulnerability has been identified in Argo Workflows during the extraction of archived artifacts, where symbolic links inside a crafted archive are not safely validated before file extraction. An attacker could exploit this flaw by submitting a malicious archive containing symbolic links that point outside the intended extraction directory, causing files to be written or overwritten in unintended locations within the workflow pod. Successful exploitation may allow an attacker to overwrite execution control files and achieve arbitrary command execution during pod startup.
8.3 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
74 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Expr, an expression language and expression evaluation for Go. This vulnerability allows a denial of service (DoS) via recursive traversal over user-provided deeply nested or cyclic data structures without enforcing a maximum recursion depth, leading to a stack overflow panic and application crash.
7.5 (High)
Affected products
Fixed
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
66 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in KEDA, a Kubernetes-based Event Driven Autoscaling component. This arbitrary file read vulnerability allows an attacker with permissions to create or modify a TriggerAuthentication resource to read any file from the node's filesystem where the KEDA pod resides. This is due to insufficient path validation when handling Service Account Tokens during HashiCorp Vault authentication. Successful exploitation can lead to the exfiltration of sensitive system information, such as secrets or configuration files.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Vendor Fix
fix
|
Known not affected
91 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Threats
Impact
Important
A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
91 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Vendor Fix
fix
|
Known not affected
90 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Threats
Impact
Important
A path traversal flaw has been discovered in the python wheel too. The unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts.
7.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x | — |
Workaround
|
Threats
Impact
Important
References
105 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat OpenShift AI.",
"title": "Topic"
},
{
"category": "general",
"text": "Release of RHOAI 2.25.2 provides these changes:",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:2695",
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12805",
"url": "https://access.redhat.com/security/cve/CVE-2025-12805"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-14925",
"url": "https://access.redhat.com/security/cve/CVE-2025-14925"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66034",
"url": "https://access.redhat.com/security/cve/CVE-2025-66034"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66626",
"url": "https://access.redhat.com/security/cve/CVE-2025-66626"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68156",
"url": "https://access.redhat.com/security/cve/CVE-2025-68156"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68476",
"url": "https://access.redhat.com/security/cve/CVE-2025-68476"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69223",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-24049",
"url": "https://access.redhat.com/security/cve/CVE-2026-24049"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_ai/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2695.json"
}
],
"title": "Red Hat Security Advisory: RHOAI 2.25.2 - Red Hat OpenShift AI",
"tracking": {
"current_release_date": "2026-07-01T21:42:18+00:00",
"generator": {
"date": "2026-07-01T21:42:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:2695",
"initial_release_date": "2026-02-12T22:43:13+00:00",
"revision_history": [
{
"date": "2026-02-12T22:43:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-02-12T22:43:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:42:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift AI 2.25",
"product": {
"name": "Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_ai:2.25::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift AI"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"product_id": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-rhel9-operator@sha256%3Aeedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770825519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"product_id": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-dashboard-rhel9@sha256%3Aa15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770641923"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"product_id": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-kf-notebook-controller-rhel9@sha256%3A7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281700"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"product_id": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-kueue-controller-rhel9@sha256%3A56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770282006"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"product_id": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-mod-arch-model-registry-rhel9@sha256%3A86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770642057"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"product_id": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-controller-rhel9@sha256%3A29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770624309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-job-async-upload-rhel9@sha256%3A25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770358847"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-operator-rhel9@sha256%3Ae94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770297362"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-rhel9@sha256%3A22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770326269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"product_id": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-notebook-controller-rhel9@sha256%3Ab84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"product_id": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-trustyai-service-rhel9@sha256%3A05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770313681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x",
"product": {
"name": "registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x",
"product_id": "registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/odh-vllm-cpu-rhel9@sha256%3Abab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd?arch=s390x\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770816984"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"product_id": "registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-codeflare-operator-rhel9@sha256%3A2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"product_id": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-dashboard-rhel9@sha256%3Ace1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770641923"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"product_id": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel9@sha256%3A42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281866"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"product_id": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256%3A04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770282201"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"product_id": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-operator-controller-rhel9@sha256%3Ac51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281698"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"product_id": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-kf-notebook-controller-rhel9@sha256%3Acf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281700"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"product_id": "registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-kuberay-operator-controller-rhel9@sha256%3A7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770786164"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"product_id": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-kueue-controller-rhel9@sha256%3A633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770282006"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"product_id": "registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-llama-stack-k8s-operator-rhel9@sha256%3Ae8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770788315"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-api-server-v2-rhel9@sha256%3Aade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296268"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-driver-rhel9@sha256%3A820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296001"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-launcher-rhel9@sha256%3Af01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770295985"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256%3A7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296071"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-runtime-generic-rhel9@sha256%3A114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770786633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256%3A9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296052"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"product_id": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-mlmd-grpc-server-rhel9@sha256%3A5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770297372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"product_id": "registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-mm-rest-proxy-rhel9@sha256%3Aaf7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296950"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"product_id": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-mod-arch-model-registry-rhel9@sha256%3Af9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770642057"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"product_id": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-controller-rhel9@sha256%3A0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770624309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-job-async-upload-rhel9@sha256%3A9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770358847"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-operator-rhel9@sha256%3Aeb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770297362"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-rhel9@sha256%3A741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770326269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"product_id": "registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-runtime-adapter-rhel9@sha256%3A4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770298324"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"product_id": "registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-serving-controller-rhel9@sha256%3Aef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770297416"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"product_id": "registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-rhel9@sha256%3A3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770341154"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"product_id": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-notebook-controller-rhel9@sha256%3A6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"product_id": "registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-openvino-model-server-rhel9@sha256%3A84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770621450"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"product_id": "registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-operator-bundle@sha256%3A74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770828479"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"product_id": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-rhel9-operator@sha256%3A53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770825519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"product_id": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-training-operator-rhel9@sha256%3Aba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770313067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"product": {
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"product_id": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/odh-trustyai-service-rhel9@sha256%3A883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed?arch=amd64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770313681"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"product_id": "registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-codeflare-operator-rhel9@sha256%3A53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281761"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"product_id": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-dashboard-rhel9@sha256%3A4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770641923"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"product_id": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel9@sha256%3A56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281866"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"product_id": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256%3A33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770282201"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"product_id": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-operator-controller-rhel9@sha256%3A12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281698"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"product_id": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-kf-notebook-controller-rhel9@sha256%3A72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281700"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"product_id": "registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-kuberay-operator-controller-rhel9@sha256%3A2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770786164"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"product_id": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-kueue-controller-rhel9@sha256%3Aff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770282006"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"product_id": "registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-llama-stack-k8s-operator-rhel9@sha256%3A1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770788315"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-api-server-v2-rhel9@sha256%3A8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296268"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-driver-rhel9@sha256%3A3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296001"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-launcher-rhel9@sha256%3A8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770295985"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256%3A1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296071"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-runtime-generic-rhel9@sha256%3A816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770786633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256%3Af0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296052"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"product_id": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-mlmd-grpc-server-rhel9@sha256%3A3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770297372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"product_id": "registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-mm-rest-proxy-rhel9@sha256%3Acf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296950"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"product_id": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-mod-arch-model-registry-rhel9@sha256%3A5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770642057"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"product_id": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-controller-rhel9@sha256%3Ae7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770624309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-job-async-upload-rhel9@sha256%3Aa7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770358847"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-operator-rhel9@sha256%3A37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770297362"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-rhel9@sha256%3A49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770326269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"product_id": "registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-runtime-adapter-rhel9@sha256%3Aa26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770298324"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"product_id": "registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-serving-controller-rhel9@sha256%3A1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770297416"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"product_id": "registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-rhel9@sha256%3A83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770341154"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"product_id": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-notebook-controller-rhel9@sha256%3A659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"product_id": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-rhel9-operator@sha256%3A890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770825519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"product_id": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-training-operator-rhel9@sha256%3A4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770313067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"product": {
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"product_id": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/odh-trustyai-service-rhel9@sha256%3Ab7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f?arch=arm64\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770313681"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-dashboard-rhel9@sha256%3A4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770641923"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel9@sha256%3A84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281866"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256%3Ad2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770282201"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-operator-controller-rhel9@sha256%3A1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281698"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-kf-notebook-controller-rhel9@sha256%3A1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281700"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-kueue-controller-rhel9@sha256%3A3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770282006"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-api-server-v2-rhel9@sha256%3A5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296268"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-driver-rhel9@sha256%3Ad9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296001"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-launcher-rhel9@sha256%3A95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770295985"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256%3A68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296071"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-runtime-generic-rhel9@sha256%3A6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770786633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256%3A1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770296052"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-mlmd-grpc-server-rhel9@sha256%3Af441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770297372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-mod-arch-model-registry-rhel9@sha256%3A331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770642057"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-controller-rhel9@sha256%3A2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770624309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-job-async-upload-rhel9@sha256%3A5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770358847"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-operator-rhel9@sha256%3A2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770297362"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-rhel9@sha256%3A9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770326269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-notebook-controller-rhel9@sha256%3A1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770281702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-rhel9-operator@sha256%3A9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770825519"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-training-operator-rhel9@sha256%3A12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770313067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-trustyai-service-rhel9@sha256%3Ad29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770313681"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"product": {
"name": "registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"product_id": "registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/odh-vllm-cpu-rhel9@sha256%3A5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca?arch=ppc64le\u0026repository_url=registry.redhat.io/rhoai\u0026tag=1770816984"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64"
},
"product_reference": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64 as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64"
},
"product_reference": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le"
},
"product_reference": "registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x as a component of Red Hat OpenShift AI 2.25",
"product_id": "Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
},
"product_reference": "registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x",
"relates_to_product_reference": "Red Hat OpenShift AI 2.25"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-12805",
"cwe": {
"id": "CWE-653",
"name": "Improper Isolation or Compartmentalization"
},
"discovery_date": "2025-11-06T13:38:39.035000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2413101"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user\u2019s Llama Stack instance and potentially view or manipulate sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "llama-stack-k8s-operator: Llama Stack service exposed across namespaces due to missing NetworkPolicy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw in Red Hat OpenShift AI (RHOAI). The `llama-stack-operator` fails to implement a `NetworkPolicy`, enabling unauthorized access to Llama Stack services across different namespaces. This allows users to potentially view or manipulate sensitive data belonging to other users within the same RHOAI instance.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12805"
},
{
"category": "external",
"summary": "RHBZ#2413101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2413101"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12805",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12805"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12805",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12805"
}
],
"release_date": "2025-12-31T23:59:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "llama-stack-k8s-operator: Llama Stack service exposed across namespaces due to missing NetworkPolicy"
},
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-14925",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2025-12-23T22:03:38.271814+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2424745"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Hugging Face Accelerate. A remote attacker can achieve arbitrary code execution by exploiting a deserialization of untrusted data vulnerability. This occurs when the target visits a malicious page or opens a malicious file, leading to improper validation of user-supplied data during the parsing of checkpoints. Successful exploitation allows the attacker to execute code in the context of the current process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "accelerate: Hugging Face Accelerate: Remote Code Execution via Deserialization of Untrusted Data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products as it allows remote code execution via deserialization of untrusted data in Hugging Face Accelerate. Exploitation requires user interaction, where a target must open a specially crafted malicious file or visit a malicious page. This flaw affects components within Red Hat AI Inference Server, OpenShift Lightspeed, Red Hat Enterprise Linux AI, and Red Hat OpenShift AI.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-14925"
},
{
"category": "external",
"summary": "RHBZ#2424745",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2424745"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-14925",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14925"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14925",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14925"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-25-1140/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-25-1140/"
}
],
"release_date": "2025-12-23T21:05:07.497000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid processing untrusted checkpoint files or visiting untrusted web pages with applications utilizing Hugging Face Accelerate. Restricting the sources of input data for affected components can significantly reduce the attack surface. No service restart is required for this operational control.",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "accelerate: Hugging Face Accelerate: Remote Code Execution via Deserialization of Untrusted Data"
},
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2025-66034",
"cwe": {
"id": "CWE-91",
"name": "XML Injection (aka Blind XPath Injection)"
},
"discovery_date": "2025-11-29T02:01:04.281026+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417780"
}
],
"notes": [
{
"category": "description",
"text": "This vulnerability in fontTools varLib allows a crafted .designspace file to trigger arbitrary file writes and XML-based content injection during variable-font generation. Because filenames are not sanitized, an attacker can use path traversal to overwrite files anywhere on the filesystem, and malicious payloads embedded in XML labelname elements can be injected directly into the generated output. When these overwritten files reside in executable or web-served locations, this can enable local remote-code execution or corruption of application or configuration files. The issue affects the varLib CLI and any code that invokes fontTools.varLib.main().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fonttools: fontTools: Arbitrary file write leading to remote code execution via malicious .designspace file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is rated Moderate rather than Important because the exploitability hinges on several limiting technical factors despite the high integrity impact. The arbitrary file-write and XML-injection pathways are only reachable when a user or automated workflow locally processes a malicious .designspace file, giving the flaw a local attack vector (AV:L) and requiring explicit user interaction (UI:R)\u2014meaning an attacker cannot trigger it remotely over the network. The attack also involves high complexity (AC:H), as it depends on crafted designspace structures, controlled font sources, and specific invocation of fonttools varLib or code that directly calls varLib.main(). Additionally, the vulnerability does not expose confidentiality, and availability effects are limited to potential file corruption. These constraints significantly narrow real-world exposure, keeping the risk profile in the Moderate range despite the possibility of high local integrity impact when exploited.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66034"
},
{
"category": "external",
"summary": "RHBZ#2417780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417780"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66034"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66034",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66034"
},
{
"category": "external",
"summary": "https://github.com/fonttools/fonttools/commit/a696d5ba93270d5954f98e7cab5ddca8a02c1e32",
"url": "https://github.com/fonttools/fonttools/commit/a696d5ba93270d5954f98e7cab5ddca8a02c1e32"
},
{
"category": "external",
"summary": "https://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv",
"url": "https://github.com/fonttools/fonttools/security/advisories/GHSA-768j-98cg-p3fv"
}
],
"release_date": "2025-11-29T01:07:12.193000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted .designspace files with the fontTools varLib script or any application that invokes fontTools.varLib.main(). Restrict the execution environment of processes handling .designspace files to minimize potential impact from arbitrary file writes. If the fonttools package is not required, consider removing it.",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fonttools: fontTools: Arbitrary file write leading to remote code execution via malicious .designspace file"
},
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-66626",
"cwe": {
"id": "CWE-73",
"name": "External Control of File Name or Path"
},
"discovery_date": "2025-12-09T21:01:10.560389+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2420818"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal and arbitrary file overwrite vulnerability has been identified in Argo Workflows during the extraction of archived artifacts, where symbolic links inside a crafted archive are not safely validated before file extraction. An attacker could exploit this flaw by submitting a malicious archive containing symbolic links that point outside the intended extraction directory, causing files to be written or overwritten in unintended locations within the workflow pod. Successful exploitation may allow an attacker to overwrite execution control files and achieve arbitrary command execution during pod startup.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/argoproj/argo-workflows: argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has rated this issue as High severity (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H, 8.3) because an attacker with basic workflow submission privileges can supply a specially crafted archive that is automatically extracted without proper validation. The attack complexity is low and does not require user interaction once the malicious workflow is submitted. Successful exploitation allows arbitrary file overwrite within the affected pod, including critical execution files, which can result in code execution at pod startup. While the impact is generally limited to the compromised pod and does not directly lead to host-level compromise, the integrity and availability impacts within the container are significant, justifying a High severity rating.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66626"
},
{
"category": "external",
"summary": "RHBZ#2420818",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420818"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66626",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66626"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66626",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66626"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-p84v-gxvw-73pf",
"url": "https://github.com/advisories/GHSA-p84v-gxvw-73pf"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-workflows/blob/5291e0b01f94ba864f96f795bb500f2cfc5ad799/workflow/executor/executor.go#L1034-L1037",
"url": "https://github.com/argoproj/argo-workflows/blob/5291e0b01f94ba864f96f795bb500f2cfc5ad799/workflow/executor/executor.go#L1034-L1037"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-workflows/commit/6b92af23f35aed4d4de8b04adcaf19d68f006de1",
"url": "https://github.com/argoproj/argo-workflows/commit/6b92af23f35aed4d4de8b04adcaf19d68f006de1"
},
{
"category": "external",
"summary": "https://github.com/argoproj/argo-workflows/security/advisories/GHSA-xrqc-7xgx-c9vh",
"url": "https://github.com/argoproj/argo-workflows/security/advisories/GHSA-xrqc-7xgx-c9vh"
}
],
"release_date": "2025-12-09T20:19:14.680000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/argoproj/argo-workflows: argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links"
},
{
"cve": "CVE-2025-68156",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-16T19:01:42.049157+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2422891"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Expr, an expression language and expression evaluation for Go. This vulnerability allows a denial of service (DoS) via recursive traversal over user-provided deeply nested or cyclic data structures without enforcing a maximum recursion depth, leading to a stack overflow panic and application crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products utilizing the `Expr` Go library because it can lead to a denial-of-service. Exploitation requires an application to evaluate expressions against untrusted or insufficiently validated data structures containing deeply nested or cyclic references, which can cause a stack overflow and application crash. Products that do not process untrusted input with `Expr` are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68156"
},
{
"category": "external",
"summary": "RHBZ#2422891",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2422891"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68156",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68156"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68156",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68156"
},
{
"category": "external",
"summary": "https://github.com/expr-lang/expr/pull/870",
"url": "https://github.com/expr-lang/expr/pull/870"
},
{
"category": "external",
"summary": "https://github.com/expr-lang/expr/security/advisories/GHSA-cfpf-hrx2-8rv6",
"url": "https://github.com/expr-lang/expr/security/advisories/GHSA-cfpf-hrx2-8rv6"
}
],
"release_date": "2025-12-16T18:24:11.648000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications using the `Expr` library should ensure that evaluation environments do not contain cyclic references. Additionally, externally supplied data structures must be validated or sanitized before being passed to `Expr` for evaluation. As a last-resort defensive measure, expression evaluation can be wrapped with panic recovery to prevent a full process crash.",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation"
},
{
"cve": "CVE-2025-68476",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2025-12-22T22:03:38.850390+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2424509"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in KEDA, a Kubernetes-based Event Driven Autoscaling component. This arbitrary file read vulnerability allows an attacker with permissions to create or modify a TriggerAuthentication resource to read any file from the node\u0027s filesystem where the KEDA pod resides. This is due to insufficient path validation when handling Service Account Tokens during HashiCorp Vault authentication. Successful exploitation can lead to the exfiltration of sensitive system information, such as secrets or configuration files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/kedacore/keda: KEDA: Arbitrary file read vulnerability in Vault authentication",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important because an attacker with permissions to create or modify a KEDA TriggerAuthentication resource can perform arbitrary file reads from the node\u0027s filesystem. This impacts Red Hat OpenShift products that utilize KEDA with HashiCorp Vault authentication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68476"
},
{
"category": "external",
"summary": "RHBZ#2424509",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2424509"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68476",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68476"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68476",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68476"
},
{
"category": "external",
"summary": "https://github.com/kedacore/keda/commit/15c5677f65f809b9b6b59a52f4cf793db0a510fd",
"url": "https://github.com/kedacore/keda/commit/15c5677f65f809b9b6b59a52f4cf793db0a510fd"
},
{
"category": "external",
"summary": "https://github.com/kedacore/keda/security/advisories/GHSA-c4p6-qg4m-9jmr",
"url": "https://github.com/kedacore/keda/security/advisories/GHSA-c4p6-qg4m-9jmr"
}
],
"release_date": "2025-12-22T21:35:00.480000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/kedacore/keda: KEDA: Arbitrary file read vulnerability in Vault authentication"
},
{
"cve": "CVE-2025-69223",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T20:01:19.831548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427456"
}
],
"notes": [
{
"category": "description",
"text": "A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host\u0027s memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "RHBZ#2427456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69223",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a",
"url": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg"
}
],
"release_date": "2026-01-05T22:00:17.715000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
},
{
"cve": "CVE-2026-24049",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-22T05:00:54.709179+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431959"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal flaw has been discovered in the python wheel too. The unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64"
],
"known_not_affected": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24049"
},
{
"category": "external",
"summary": "RHBZ#2431959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24049"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24049",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24049"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef",
"url": "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/releases/tag/0.46.2",
"url": "https://github.com/pypa/wheel/releases/tag/0.46.2"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx",
"url": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx"
}
],
"release_date": "2026-01-22T04:02:08.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-12T22:43:13+00:00",
"details": "For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2695"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:2c98b3b933276dbcead1fde142bfcd3f130d89e6812c6b433da7eed650ae2dbc_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:53c79641084ebe6c98274b31e34cc1a759b1443b96cf7dc45317008a30b1fc8d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4333242b1f6f25f8656bd612870d02868f3724d80cf542c8d78ada49a8ad9cb2_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:4519eccf48b1f2393bab39980fadde7e398cfff1933b78e9565029f95296ff05_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:42f631d436d62d7399ca3ef8fd89a334c7839823c8e6ffafe2cdd32ee36493bb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:56615395c62e26f3ef9bd267c0d5245331b8c67508df4bd8bbc83d72c4ef3b99_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:84a87320bee17439c05d2c6a1edf3b7e83b2f7ebfdd850399d12635e58da4d55_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:04a821296c01da5155ab36d9381b962866c26e9c7516f321ffe440b7fa13b4c5_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:33aaad4cc22d1e2998e4710cc644f4032bec8f140e5236fdc83d520a869626ef_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d2cb739f949dc4ec9617bb9470a8482a8011077043e06e735ab0c9d7d1cac381_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:12d3d74ffbd7eb3a4817952835ab9bf5b89edf4fc9af661a28ec009f3251a519_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1fb43684436f6b55152aab553177df048d5bb267c5efbc61f0f27cdbb0848957_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:c51fe06b557fa20d78af7b12cf6c6ddc3227f44f3957a52f3037c25700cfadb2_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:1e1d5fad0aecf93b79b21112360aa0c308654c5b5df829cd3144488f8e217af4_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:72f613c382aac012e2e79e800df50c210f41693cc2aaa5b99cb28ab38f1966c8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:7f027d05df255e62828ab28d5f188655fc125bc4ead872c7a33cedaf47b12f8c_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:cf586b7cb58dff92e7f31b8b9ebe5c971e55c67b8ba2c3320d2b71183c88fc7c_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:2df297674884e6ac297bae685f80741489ddf1e1d0ae1d5ec354917dff1acdda_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:7af31fef4a2269c2cf444420048ea644c9949714e9a63417fe6d7288abee457b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:3ca10a19a0706af65bb590403adad92114810bf0ac64a89d6ac1d862e4cec671_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:56a321957afd15d357c8b53fc50299c0811981e8b925e64858dc7c4cfcea1993_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:633bfd24f1396c150b5902407879e7b26e7681074772fbbfeccc4d48cbe77b19_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:ff09ee957797fa15208f9130e246ae006c385cc799573a71d31aff9ddf0e805d_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:e8ccea3bfafbde4d5b91cc7b7732b2b64d6aa08499b5ca63b4d8f1e980291351_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:5bd1065dca1978c49c0143e2be4e921465c6a67fa786ab2a9254f0790259096e_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:8b34aaf5a7729ef1ccd01f2b1b1e3439b304343f3403de67f68255015206fbf4_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:ade80e2ecb6fa56c20539e11677c29e57a1e20b5ce60f8414fd8ff3e83c9bc28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3439c67a60c8323eb88f0181e8f811e5bdd7b51169f8b8cc687ab2148d1bfabe_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:820fd80dbce2d9d9cdf38989ce84ee5601e862786a732ad108fc319e28131944_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:d9a6959a71074ffc5ec0fa324af389fbd8277efbd22a827cef8a439b18cd2bcf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:8e9dbdc213745aa0990f47e50b1d899ac2121951b9346420131d76cc393a493a_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:95ca9b1ecee8f11d6edabd7af76f60d2987df91d11fd0fb4c6578df735717422_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:f01860f904557f887d8aafe42143c63352d6cb496dc727c265f14e3c2d296e06_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:1c76d957c8588ea2987d4b551bbefc2ef07c546cbaeb3148caff06f640b35ade_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:68e9797f37f8e4de817ee4e1cba7d583b541db2373c5d250ccc3344820720b85_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:7f362050312693129d3a15b6eed4fa06576d6529a99bc864f273c55145ae14ec_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:114fd9b55f5ea28a16c3fe2eef773a4cb4693c1885ef6193399cfea278191acb_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:6490c1848b373efe6c327f8959e06b66b1ac3fe0f90fa697f7309d9f48c66765_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:816d8f81196bb0acfe5bbc792f9768916724bdecea3671172412eeb6948c4ff7_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:1e66abc3373c50b5ef69b0c63bf877a978e3aa0a368630973cf0a2be7374becf_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:9c061b939c8094f4939cd183da381ad8e49d878cc2fdd373b8d26eecae07ab6d_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:f0511f3768e51b6801b66c91b302010e6197facb71a0b7777c4d3ad3039b6c88_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:3e70ae3e8b5f776ad3e2a184a1f2f572de5c46386f34edb99e2b9d1d9249ae41_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:5924a7e64d6031aa926f9ecb9ee3be30d8251c4705813a9bef6716d18b7411b4_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:f441a07265d87fb59ee375723e98fbc9af5f3fd5a2c09761692b0e271205f0bb_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:af7bbec8e30b0e0d8393fe1e2bd656d7630b7c9828536be6664fa848fac61505_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:cf4e879101bc4e3666649dda0926de8bbd95e641dc6832c29dc457128256eb6c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:5e83e352d083892699338da3fa4c9b8218561e7167b4dff102d22e401cbc7f75_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:f9ee33c1c4d7f2a872861c9ad1dbb78ba8fed3ab562ae90f12f06a892147e367_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:0ea603487b204f43ebddb1514500cdeaa02a0b763a627e4e10979deec60b7d28_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:29ff94de29714044377d060db9ad47f151afec858c8fc127c94ff04adbb984b7_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:2b6c00ee23df974d22c185b592ef4d7babbb76bcadc129a04c869f9983630103_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:e7c4da685e08c79d5b49e9f12ff5efa7cc7d9e26a03c91ab19f86c99e9f4ac23_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:25077a998c7b6ec7e8122026f2152419a0efe293a00899bb745a66a57f913848_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:5178d3800d74d84a6282a7ddc888eea9b81d62c8a385ad57bb742fa28fb0f575_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:9070f6741e667a4a145ede8dc67d4f7545944ef5fe4937fdcb1a08e9f537e068_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:a7efdef6ef06af0aa97de86ebd0c0ccfc316719195289dfa835261da53b06589_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:2dd15cd61e1e5d98791a68bb513572b82ce5d799dd3fa864d43a8134536b19ff_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:37938821d832d7b957aa6f9b4a468c0eed785625c2bb8257726b4dc094bab9bd_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e94a31493c7207846ab5d13387311e9a6d99ffa7885d1b8faa8602750059c2a3_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:eb0500f30373c5bcf3e10e27b081f97e5ce8b29a71dde9ff9b7e1066fd5dd80e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:22c745e5d04f7a0d9b188bf6657b1de053c61d99d813f11f6819550ef2a96732_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:49495dd44b7956a5e1bed226a896be649a07cd1b1f915de31d39041a77f6cdb5_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:741b836350d9ec48109468382c81066f401ebb4712ca414d44e3042894111419_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:9cf7f5bdebf6b53fce9cfed4fe530c380f36bb1d60120b53c06043371863d4e6_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:3dd54b885e3d63e5882284bf4878aa723c1fef6833601ed5d5a091b6b74c68d1_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:83f773633a864b707c7e371bd554f79622b999a1ecef4b1cd368e0dd72b7a9ad_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:4a356900b1daca75092b8eac5c1d16f38703941caebba5ddec48120e854bd7e9_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-runtime-adapter-rhel9@sha256:a26699523e44b43a0f237ee664b3574cbea8d11576bd4bc884c3766c0effb8df_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:1a85e42e32534b58410c519b4d8f7d84fe6ff96567612f18f4bd558fa3c895a6_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-modelmesh-serving-controller-rhel9@sha256:ef72689e332c4e224a80603ffbcc1603cdf8fe4230b9fd60e7713f0b5c2d5045_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:1c15c95b65bfbcc620d4d429431eabca8f4714d32a38aa68cb15c549e1a6ce4c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:659acd52802b6f2300c223bcde827f1d9b80ac9a93fdb6f574fcb5a08b92607c_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:6f44d3b3973c34677d347a67841dbfabd23817de1b5c26967f1b9952c27b48c8_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:b84eb1329e837895ca50d3284553e195918fefc71bdb9dc2550a90b2d927b6eb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-openvino-model-server-rhel9@sha256:84739168d6ea2813c5b9666773166649a6b328a279dac80b61c51311a6a2943a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-operator-bundle@sha256:74968eea50e067a335e830cfde6d8bf3cd130a9eba77ce918e25e252b7c1541e_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:53a8389250e59e7c9f5a9a61914cac361946b256132649bd45f775c8f36b486a_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:890b0e4467cdfd68985af367a6d015ff7e92a2b6a1f46e2c2bf233c3d621f1a8_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:9f667eb88f5b085ec40b8b06e5f42cf6a0ced0913d7d2b0402cd0472eb4b428c_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:eedab7e6fd4adb2bd697e8cbcbd6703291d9fe5d2a3a048e8c34d9529586c93a_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:12ac94419811458fb309d417091e279d485c4a665899d3a7d3157b8b32c1b03d_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:4318d360c3a968ee79ef68979105ee5ffb93137757a3b4a6c42c15e6cf6b11ba_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:ba6188d3d284f030f90e117c87501a8d08c4b356383429ad39806472113aa41b_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:05c7ffbd4dfa1f6ef760ed86f142d84d4c42583fa0b747eedc234763bef74ebb_s390x",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:883f4ae255413c1409d3fb607f91fdf13badf534c5e8f78d9905c8da69cdeeed_amd64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:b7f375f2f1f4eb828ee8255143143385c4662aab967c007a89954903c8a7c27f_arm64",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:d29d106e6c0f6a3ae971903a16cf4a564950bcf5336219eb6665cae98b824d33_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:5a2db37676e0f0b05fe2a8c5f82bb489ff3c8dd80f94b9fb3540488ab39ff6ca_ppc64le",
"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:bab28cfa3596192875dbf305a4ed7432db0ebebec604053d30895931818740cd_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking"
}
]
}
RHSA-2026:2717
Vulnerability from csaf_redhat - Published: 2026-02-16 11:34 - Updated: 2026-07-01 21:42Summary
Red Hat Security Advisory: python-urllib3 security update
Severity
Important
Notes
Topic: An update for python-urllib3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
* urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
* urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for python-urllib3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)\n\n* urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)\n\n* urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:2717",
"url": "https://access.redhat.com/errata/RHSA-2026:2717"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2717.json"
}
],
"title": "Red Hat Security Advisory: python-urllib3 security update",
"tracking": {
"current_release_date": "2026-07-01T21:42:20+00:00",
"generator": {
"date": "2026-07-01T21:42:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:2717",
"initial_release_date": "2026-02-16T11:34:12+00:00",
"revision_history": [
{
"date": "2026-02-16T11:34:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-02-16T11:34:12+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:42:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:8.6::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-urllib3-0:1.24.2-5.el8_6.4.src",
"product": {
"name": "python-urllib3-0:1.24.2-5.el8_6.4.src",
"product_id": "python-urllib3-0:1.24.2-5.el8_6.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-urllib3@1.24.2-5.el8_6.4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"product": {
"name": "python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"product_id": "python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-urllib3@1.24.2-5.el8_6.4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:1.24.2-5.el8_6.4.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src"
},
"product_reference": "python-urllib3-0:1.24.2-5.el8_6.4.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-urllib3-0:1.24.2-5.el8_6.4.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
},
"product_reference": "python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:1.24.2-5.el8_6.4.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src"
},
"product_reference": "python-urllib3-0:1.24.2-5.el8_6.4.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-urllib3-0:1.24.2-5.el8_6.4.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
},
"product_reference": "python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:1.24.2-5.el8_6.4.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src"
},
"product_reference": "python-urllib3-0:1.24.2-5.el8_6.4.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-urllib3-0:1.24.2-5.el8_6.4.noarch as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
},
"product_reference": "python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:34:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2717"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:34:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2717"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:34:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2717"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_6.4.noarch",
"BaseOS-8.6.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_6.4.src",
"BaseOS-8.6.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_6.4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
}
]
}
RHSA-2026:2718
Vulnerability from csaf_redhat - Published: 2026-02-16 11:40 - Updated: 2026-07-01 21:42Summary
Red Hat Security Advisory: python-urllib3 security update
Severity
Important
Notes
Topic: An update for python-urllib3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
* urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
* urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for python-urllib3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)\n\n* urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)\n\n* urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:2718",
"url": "https://access.redhat.com/errata/RHSA-2026:2718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2718.json"
}
],
"title": "Red Hat Security Advisory: python-urllib3 security update",
"tracking": {
"current_release_date": "2026-07-01T21:42:19+00:00",
"generator": {
"date": "2026-07-01T21:42:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:2718",
"initial_release_date": "2026-02-16T11:40:57+00:00",
"revision_history": [
{
"date": "2026-02-16T11:40:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-02-16T11:40:57+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:42:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.8::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:8.8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-urllib3-0:1.24.2-5.el8_8.3.src",
"product": {
"name": "python-urllib3-0:1.24.2-5.el8_8.3.src",
"product_id": "python-urllib3-0:1.24.2-5.el8_8.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-urllib3@1.24.2-5.el8_8.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"product": {
"name": "python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"product_id": "python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-urllib3@1.24.2-5.el8_8.3?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:1.24.2-5.el8_8.3.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src"
},
"product_reference": "python-urllib3-0:1.24.2-5.el8_8.3.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-urllib3-0:1.24.2-5.el8_8.3.noarch as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
},
"product_reference": "python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:1.24.2-5.el8_8.3.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src"
},
"product_reference": "python-urllib3-0:1.24.2-5.el8_8.3.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-urllib3-0:1.24.2-5.el8_8.3.noarch as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
},
"product_reference": "python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:40:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2718"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:40:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2718"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:40:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2718"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:python3-urllib3-0:1.24.2-5.el8_8.3.noarch",
"BaseOS-8.8.0.Z.TUS:python-urllib3-0:1.24.2-5.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:python3-urllib3-0:1.24.2-5.el8_8.3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
}
]
}
RHSA-2026:2723
Vulnerability from csaf_redhat - Published: 2026-02-16 11:26 - Updated: 2026-07-01 21:42Summary
Red Hat Security Advisory: python-urllib3 security update
Severity
Important
Notes
Topic: An update for python-urllib3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
* urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
* urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for python-urllib3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)\n\n* urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)\n\n* urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:2723",
"url": "https://access.redhat.com/errata/RHSA-2026:2723"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2723.json"
}
],
"title": "Red Hat Security Advisory: python-urllib3 security update",
"tracking": {
"current_release_date": "2026-07-01T21:42:19+00:00",
"generator": {
"date": "2026-07-01T21:42:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:2723",
"initial_release_date": "2026-02-16T11:26:37+00:00",
"revision_history": [
{
"date": "2026-02-16T11:26:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-02-16T11:26:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:42:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.4::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-urllib3-0:1.24.2-5.el8_4.1.src",
"product": {
"name": "python-urllib3-0:1.24.2-5.el8_4.1.src",
"product_id": "python-urllib3-0:1.24.2-5.el8_4.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-urllib3@1.24.2-5.el8_4.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"product": {
"name": "python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"product_id": "python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-urllib3@1.24.2-5.el8_4.1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:1.24.2-5.el8_4.1.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src"
},
"product_reference": "python-urllib3-0:1.24.2-5.el8_4.1.src",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-urllib3-0:1.24.2-5.el8_4.1.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
},
"product_reference": "python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"relates_to_product_reference": "BaseOS-8.4.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:1.24.2-5.el8_4.1.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src"
},
"product_reference": "python-urllib3-0:1.24.2-5.el8_4.1.src",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-urllib3-0:1.24.2-5.el8_4.1.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)",
"product_id": "BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
},
"product_reference": "python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"relates_to_product_reference": "BaseOS-8.4.0.Z.EUS.EXTENSION"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:26:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:26:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2723"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:26:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2723"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.4.0.Z.AUS:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.AUS:python3-urllib3-0:1.24.2-5.el8_4.1.noarch",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python-urllib3-0:1.24.2-5.el8_4.1.src",
"BaseOS-8.4.0.Z.EUS.EXTENSION:python3-urllib3-0:1.24.2-5.el8_4.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
}
]
}
RHSA-2026:2728
Vulnerability from csaf_redhat - Published: 2026-02-16 11:56 - Updated: 2026-07-01 21:42Summary
Red Hat Security Advisory: python-urllib3 security update
Severity
Important
Notes
Topic: An update for python-urllib3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
* urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
* urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Threats
Impact
Important
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for python-urllib3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)\n\n* urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)\n\n* urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:2728",
"url": "https://access.redhat.com/errata/RHSA-2026:2728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2728.json"
}
],
"title": "Red Hat Security Advisory: python-urllib3 security update",
"tracking": {
"current_release_date": "2026-07-01T21:42:24+00:00",
"generator": {
"date": "2026-07-01T21:42:24+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:2728",
"initial_release_date": "2026-02-16T11:56:59+00:00",
"revision_history": [
{
"date": "2026-02-16T11:56:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-02-16T11:56:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:42:24+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.2::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "python-urllib3-0:1.24.2-4.el8_2.1.src",
"product": {
"name": "python-urllib3-0:1.24.2-4.el8_2.1.src",
"product_id": "python-urllib3-0:1.24.2-4.el8_2.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-urllib3@1.24.2-4.el8_2.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-urllib3-0:1.24.2-4.el8_2.1.noarch",
"product": {
"name": "python3-urllib3-0:1.24.2-4.el8_2.1.noarch",
"product_id": "python3-urllib3-0:1.24.2-4.el8_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-urllib3@1.24.2-4.el8_2.1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:1.24.2-4.el8_2.1.src as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src"
},
"product_reference": "python-urllib3-0:1.24.2-4.el8_2.1.src",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-urllib3-0:1.24.2-4.el8_2.1.noarch as a component of Red Hat Enterprise Linux BaseOS AUS (v. 8.2)",
"product_id": "BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
},
"product_reference": "python3-urllib3-0:1.24.2-4.el8_2.1.noarch",
"relates_to_product_reference": "BaseOS-8.2.0.Z.AUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src",
"BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:56:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src",
"BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2728"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src",
"BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src",
"BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:56:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src",
"BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2728"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src",
"BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src",
"BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src",
"BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T11:56:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src",
"BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2728"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.2.0.Z.AUS:python-urllib3-0:1.24.2-4.el8_2.1.src",
"BaseOS-8.2.0.Z.AUS:python3-urllib3-0:1.24.2-4.el8_2.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
}
]
}
RHSA-2026:2760
Vulnerability from csaf_redhat - Published: 2026-02-16 16:52 - Updated: 2026-07-01 21:42Summary
Red Hat Security Advisory: Satellite 6.18.3 Async Update
Severity
Important
Notes
Topic: A new release is now available for Red Hat Satellite 6.18 for RHEL 9.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details: Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.
Security Fix(es):
* python-aiohttp: AIOHTTP HTTP Request/Response Smuggling (CVE-2025-53643)
* python3.12-urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)
* python3.12-urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A request smuggling flaw was found in the aiohttp python library. If a pure Python version of aiohttp is installed, without the usual C extensions, for example, or if AIOHTTP_NO_EXTENSIONS is enabled, an attacker can execute a request smuggling attack to bypass certain firewalls or proxy protections.
CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
77 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Low
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src | — |
Vendor Fix
fix
|
Known not affected
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch | — |
Threats
Impact
Important
References
35 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new release is now available for Red Hat Satellite 6.18 for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* python-aiohttp: AIOHTTP HTTP Request/Response Smuggling (CVE-2025-53643)\n* python3.12-urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)\n* python3.12-urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:2760",
"url": "https://access.redhat.com/errata/RHSA-2026:2760"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2380000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380000"
},
{
"category": "external",
"summary": "2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "SAT-35237",
"url": "https://issues.redhat.com/browse/SAT-35237"
},
{
"category": "external",
"summary": "SAT-39454",
"url": "https://issues.redhat.com/browse/SAT-39454"
},
{
"category": "external",
"summary": "SAT-41521",
"url": "https://issues.redhat.com/browse/SAT-41521"
},
{
"category": "external",
"summary": "SAT-41522",
"url": "https://issues.redhat.com/browse/SAT-41522"
},
{
"category": "external",
"summary": "SAT-41523",
"url": "https://issues.redhat.com/browse/SAT-41523"
},
{
"category": "external",
"summary": "SAT-41524",
"url": "https://issues.redhat.com/browse/SAT-41524"
},
{
"category": "external",
"summary": "SAT-41525",
"url": "https://issues.redhat.com/browse/SAT-41525"
},
{
"category": "external",
"summary": "SAT-41526",
"url": "https://issues.redhat.com/browse/SAT-41526"
},
{
"category": "external",
"summary": "SAT-41527",
"url": "https://issues.redhat.com/browse/SAT-41527"
},
{
"category": "external",
"summary": "SAT-41528",
"url": "https://issues.redhat.com/browse/SAT-41528"
},
{
"category": "external",
"summary": "SAT-42125",
"url": "https://issues.redhat.com/browse/SAT-42125"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2760.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.18.3 Async Update",
"tracking": {
"current_release_date": "2026-07-01T21:42:21+00:00",
"generator": {
"date": "2026-07-01T21:42:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:2760",
"initial_release_date": "2026-02-16T16:52:18+00:00",
"revision_history": [
{
"date": "2026-02-16T16:52:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-02-16T16:52:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:42:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.18::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.18::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.18::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-maintenance",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_maintenance:6.18::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-0:3.16.0.10-1.el9sat.src",
"product": {
"name": "foreman-0:3.16.0.10-1.el9sat.src",
"product_id": "foreman-0:3.16.0.10-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.16.0.10-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.16.0.4-1.el9sat.src",
"product": {
"name": "foreman-installer-1:3.16.0.4-1.el9sat.src",
"product_id": "foreman-installer-1:3.16.0.4-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.16.0.4-1.el9sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"product": {
"name": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"product_id": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohappyeyeballs@2.6.1-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"product": {
"name": "python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"product_id": "python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.13.3-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"product": {
"name": "python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"product_id": "python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.73.22-2.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-yarl-0:1.20.1-1.el9pc.src",
"product": {
"name": "python3.12-yarl-0:1.20.1-1.el9pc.src",
"product_id": "python3.12-yarl-0:1.20.1-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-yarl@1.20.1-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"product": {
"name": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"product_id": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_maintain@1.13.7-1.el9sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"product": {
"name": "rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"product_id": "rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@12.2.14-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"product": {
"name": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"product_id": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-hammer_cli_foreman_bootdisk@0.4.2-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.18.0.6-1.el9sat.src",
"product": {
"name": "rubygem-katello-0:4.18.0.6-1.el9sat.src",
"product_id": "rubygem-katello-0:4.18.0.6-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.18.0.6-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.18.3-1.el9sat.src",
"product": {
"name": "satellite-0:6.18.3-1.el9sat.src",
"product_id": "satellite-0:6.18.3-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.18.3-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-lifecycle-0:6.18.0-2.el9sat.src",
"product": {
"name": "satellite-lifecycle-0:6.18.0-2.el9sat.src",
"product_id": "satellite-lifecycle-0:6.18.0-2.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-lifecycle@6.18.0-2.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-brotli-0:1.2.0-1.el9pc.src",
"product": {
"name": "python3.12-brotli-0:1.2.0-1.el9pc.src",
"product_id": "python3.12-brotli-0:1.2.0-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-brotli@1.2.0-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.6.3-1.el9pc.src",
"product": {
"name": "python3.12-urllib3-0:2.6.3-1.el9pc.src",
"product_id": "python3.12-urllib3-0:2.6.3-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.6.3-1.el9pc?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-pcp@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-redis@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-service-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-service-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"product_id": "foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@3.16.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"product": {
"name": "foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"product_id": "foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.16.0.4-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"product": {
"name": "foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"product_id": "foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer-katello@3.16.0.4-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"product": {
"name": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"product_id": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohappyeyeballs@2.6.1-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"product_id": "python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.73.22-2.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"product": {
"name": "python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"product_id": "python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-yarl@1.20.1-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"product": {
"name": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"product_id": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_maintain@1.13.7-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"product": {
"name": "rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"product_id": "rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@12.2.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"product": {
"name": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"product_id": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-hammer_cli_foreman_bootdisk@0.4.2-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"product": {
"name": "rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"product_id": "rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.18.0.6-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.18.3-1.el9sat.noarch",
"product": {
"name": "satellite-capsule-0:6.18.3-1.el9sat.noarch",
"product_id": "satellite-capsule-0:6.18.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.18.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.18.3-1.el9sat.noarch",
"product": {
"name": "satellite-common-0:6.18.3-1.el9sat.noarch",
"product_id": "satellite-common-0:6.18.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.18.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"product": {
"name": "satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"product_id": "satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-obsolete-packages@6.18.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.18.3-1.el9sat.noarch",
"product": {
"name": "satellite-0:6.18.3-1.el9sat.noarch",
"product_id": "satellite-0:6.18.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.18.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.18.3-1.el9sat.noarch",
"product": {
"name": "satellite-cli-0:6.18.3-1.el9sat.noarch",
"product_id": "satellite-cli-0:6.18.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.18.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"product": {
"name": "satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"product_id": "satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-lifecycle@6.18.0-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"product": {
"name": "python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"product_id": "python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.6.3-1.el9pc?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"product": {
"name": "python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"product_id": "python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.13.3-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"product": {
"name": "python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"product_id": "python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.13.3-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"product": {
"name": "python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"product_id": "python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.13.3-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"product": {
"name": "python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"product_id": "python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-brotli@1.2.0-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"product": {
"name": "python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"product_id": "python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-brotli-debugsource@1.2.0-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"product": {
"name": "python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"product_id": "python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-brotli-debuginfo@1.2.0-1.el9pc?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.10-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src"
},
"product_reference": "foreman-0:3.16.0.10-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.4-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.4-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src"
},
"product_reference": "foreman-installer-1:3.16.0.4-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch"
},
"product_reference": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src"
},
"product_reference": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.13.3-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src"
},
"product_reference": "python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-brotli-0:1.2.0-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src"
},
"product_reference": "python3.12-brotli-0:1.2.0-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-brotli-0:1.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.22-2.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.22-2.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src"
},
"product_reference": "python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.6.3-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch"
},
"product_reference": "python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.6.3-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src"
},
"product_reference": "python3.12-urllib3-0:2.6.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-yarl-0:1.20.1-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch"
},
"product_reference": "python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-yarl-0:1.20.1-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src"
},
"product_reference": "python3.12-yarl-0:1.20.1-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src"
},
"product_reference": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.3-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src"
},
"product_reference": "satellite-0:6.18.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.18.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.18.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.18.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.18.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src"
},
"product_reference": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.10-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src"
},
"product_reference": "foreman-0:3.16.0.10-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch"
},
"product_reference": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src"
},
"product_reference": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.3-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src"
},
"product_reference": "satellite-0:6.18.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.18.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.18.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.10-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src"
},
"product_reference": "foreman-0:3.16.0.10-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.4-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.4-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src"
},
"product_reference": "foreman-installer-1:3.16.0.4-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.16.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch"
},
"product_reference": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src"
},
"product_reference": "python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.13.3-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src"
},
"product_reference": "python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-brotli-0:1.2.0-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src"
},
"product_reference": "python3.12-brotli-0:1.2.0-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-brotli-0:1.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64"
},
"product_reference": "python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.22-2.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.22-2.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src"
},
"product_reference": "python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.6.3-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch"
},
"product_reference": "python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.6.3-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src"
},
"product_reference": "python3.12-urllib3-0:2.6.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-yarl-0:1.20.1-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch"
},
"product_reference": "python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-yarl-0:1.20.1-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src"
},
"product_reference": "python3.12-yarl-0:1.20.1-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src"
},
"product_reference": "rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src"
},
"product_reference": "rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch"
},
"product_reference": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src"
},
"product_reference": "rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.18.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch"
},
"product_reference": "rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.18.0.6-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src"
},
"product_reference": "rubygem-katello-0:4.18.0.6-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch"
},
"product_reference": "satellite-0:6.18.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.3-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src"
},
"product_reference": "satellite-0:6.18.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.18.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.18.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.18.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.18.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-lifecycle-0:6.18.0-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch"
},
"product_reference": "satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-lifecycle-0:6.18.0-2.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src"
},
"product_reference": "satellite-lifecycle-0:6.18.0-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-53643",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2025-07-14T21:00:57.122280+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2380000"
}
],
"notes": [
{
"category": "description",
"text": "A request smuggling flaw was found in the aiohttp python library. If a pure Python version of aiohttp is installed, without the usual C extensions, for example, or if AIOHTTP_NO_EXTENSIONS is enabled, an attacker can execute a request smuggling attack to bypass certain firewalls or proxy protections.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP HTTP Request/Response Smuggling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-53643"
},
{
"category": "external",
"summary": "RHBZ#2380000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2380000"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-53643",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53643"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-53643",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53643"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/e8d774f635dc6d1cd3174d0e38891da5de0e2b6a",
"url": "https://github.com/aio-libs/aiohttp/commit/e8d774f635dc6d1cd3174d0e38891da5de0e2b6a"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-9548-qrrj-x5pj",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-9548-qrrj-x5pj"
}
],
"release_date": "2025-07-14T20:17:18.247000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T16:52:18+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2760"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "aiohttp: AIOHTTP HTTP Request/Response Smuggling"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T16:52:18+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2760"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T16:52:18+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2760"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18-maintenance:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18-utils:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.10-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.4-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.4-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.10-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-aiohappyeyeballs-0:2.6.1-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-aiohttp-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debuginfo-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-aiohttp-debugsource-0:3.13.3-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.src",
"9Base-satellite-6.18:python3.12-brotli-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debuginfo-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-brotli-debugsource-0:1.2.0-1.el9pc.x86_64",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.22-2.el9pc.src",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-urllib3-0:2.6.3-1.el9pc.src",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-yarl-0:1.20.1-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_maintain-1:1.13.7-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.14-1.el9sat.src",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-hammer_cli_foreman_bootdisk-0:0.4.2-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.6-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.3-1.el9sat.src",
"9Base-satellite-6.18:satellite-cli-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.3-1.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-lifecycle-0:6.18.0-2.el9sat.src",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.3-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
}
]
}
RHSA-2026:2762
Vulnerability from csaf_redhat - Published: 2026-02-16 17:44 - Updated: 2026-07-01 21:42Summary
Red Hat Security Advisory: Red Hat Quay 3.10.18
Severity
Important
Notes
Topic: Red Hat Quay 3.10.18 is now available with bug fixes.
Details: Quay 3.10.18
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Threats
Impact
Important
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Threats
Impact
Important
A flaw was found in auth0/node-jws. This vulnerability allows improper signature verification via using the HS256 (Hash-based Message Authentication Code using SHA-256) algorithm under specific conditions, where applications use the jws.createVerify() function for HMAC (Keyed-Hash Message Authentication Code) algorithms and user-provided data from the JSON (JavaScript Object Notation) Web Signature protected header or payload in HMAC secret lookup routines.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Threats
Impact
Important
A path traversal flaw has been discovered in the python wheel too. The unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts.
7.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 | — |
Workaround
|
Threats
Impact
Important
References
114 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.10.18 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.10.18",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:2762",
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-34156",
"url": "https://access.redhat.com/security/cve/CVE-2024-34156"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45337",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-45338",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-65945",
"url": "https://access.redhat.com/security/cve/CVE-2025-65945"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-24049",
"url": "https://access.redhat.com/security/cve/CVE-2026-24049"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2762.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.10.18",
"tracking": {
"current_release_date": "2026-07-01T21:42:21+00:00",
"generator": {
"date": "2026-07-01T21:42:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:2762",
"initial_release_date": "2026-02-16T17:44:31+00:00",
"revision_history": [
{
"date": "2026-02-16T17:44:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-02-16T17:44:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:42:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.10",
"product": {
"name": "Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.10::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Af006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770249889"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770224116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770249881"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Af7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770133631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Ac5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770991805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Ad8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770991340"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770133671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770993022"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770133646"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ab54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1770249183"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770224116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770133631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770991340"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770133671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770133646"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1770249183"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770224116"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Aaab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770133631"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770991340"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770133671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770133646"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ab46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1770249183"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64 as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64 as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64 as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64 as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64 as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64 as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64 as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64 as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64 as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"relates_to_product_reference": "Red Hat Quay 3.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64 as a component of Red Hat Quay 3.10",
"product_id": "Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64",
"relates_to_product_reference": "Red Hat Quay 3.10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-34156",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2024-09-06T21:20:09.377905+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2310528"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Go\u0027s `encoding/gob` package is of high severity because it exposes applications to potential Denial of Service (DoS) attacks through stack exhaustion. Since `gob` relies on recursive function calls to decode nested structures, an attacker could exploit this by sending crafted messages with excessively deep nesting, causing the application to panic due to stack overflow. This risk is particularly important in scenarios where untrusted or external input is processed, as it can lead to system unavailability or crashes, undermining the reliability and availability of services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-34156"
},
{
"category": "external",
"summary": "RHBZ#2310528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-34156",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34156"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34156",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34156"
},
{
"category": "external",
"summary": "https://go.dev/cl/611239",
"url": "https://go.dev/cl/611239"
},
{
"category": "external",
"summary": "https://go.dev/issue/69139",
"url": "https://go.dev/issue/69139"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk",
"url": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3106",
"url": "https://pkg.go.dev/vuln/GO-2024-3106"
}
],
"release_date": "2024-09-06T21:15:12.020000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion"
},
{
"cve": "CVE-2024-45337",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"discovery_date": "2024-12-11T19:00:54.247490+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2331720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is classified as important rather than critical because it does not directly enable unauthorized access but rather introduces a risk of authorization bypass if the application or library misuses the PublicKeyCallback API. The vulnerability relies on incorrect assumptions made by the application when handling the sequence or state of keys provided during SSH authentication. Properly implemented systems that use the Permissions field or avoid relying on external state remain unaffected. Additionally, the vulnerability does not allow direct exploitation to gain control over a system without the presence of insecure logic in the application\u0027s handling of authentication attempts.\n\n\nRed Hat Enterprise Linux(RHEL) 8 \u0026 9 and Red Hat Openshift marked as not affected as it was determined that the problem function `ServerConfig.PublicKeyCallback`, as noted in the CVE-2024-45337 issue, is not called by Podman, Buildah, containers-common, or the gvisor-tap-vsock projects.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45337"
},
{
"category": "external",
"summary": "RHBZ#2331720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45337"
},
{
"category": "external",
"summary": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909",
"url": "https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"
},
{
"category": "external",
"summary": "https://go.dev/cl/635315",
"url": "https://go.dev/cl/635315"
},
{
"category": "external",
"summary": "https://go.dev/issue/70779",
"url": "https://go.dev/issue/70779"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ",
"url": "https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3321",
"url": "https://pkg.go.dev/vuln/GO-2024-3321"
}
],
"release_date": "2024-12-11T18:55:58.506000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"
},
{
"cve": "CVE-2024-45338",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2024-12-18T21:00:59.938173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2333122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an attacker can craft malicious input that causes the parsing functions to process data non-linearly, resulting in significant delays which leads to a denial of service by exhausting system resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-45338"
},
{
"category": "external",
"summary": "RHBZ#2333122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-45338",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45338"
},
{
"category": "external",
"summary": "https://go.dev/cl/637536",
"url": "https://go.dev/cl/637536"
},
{
"category": "external",
"summary": "https://go.dev/issue/70906",
"url": "https://go.dev/issue/70906"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ",
"url": "https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-3333",
"url": "https://pkg.go.dev/vuln/GO-2024-3333"
}
],
"release_date": "2024-12-18T20:38:22.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
},
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-65945",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2025-12-04T19:01:14.733682+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418904"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in auth0/node-jws. This vulnerability allows improper signature verification via using the HS256 (Hash-based Message Authentication Code using SHA-256) algorithm under specific conditions, where applications use the jws.createVerify() function for HMAC (Keyed-Hash Message Authentication Code) algorithms and user-provided data from the JSON (JavaScript Object Notation) Web Signature protected header or payload in HMAC secret lookup routines.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-65945"
},
{
"category": "external",
"summary": "RHBZ#2418904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418904"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-65945",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-65945"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-65945",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-65945"
},
{
"category": "external",
"summary": "https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e",
"url": "https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e"
},
{
"category": "external",
"summary": "https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x",
"url": "https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x"
}
],
"release_date": "2025-12-04T18:45:37.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
},
{
"cve": "CVE-2026-24049",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-22T05:00:54.709179+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431959"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal flaw has been discovered in the python wheel too. The unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"known_not_affected": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24049"
},
{
"category": "external",
"summary": "RHBZ#2431959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24049"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24049",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24049"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef",
"url": "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/releases/tag/0.46.2",
"url": "https://github.com/pypa/wheel/releases/tag/0.46.2"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx",
"url": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx"
}
],
"release_date": "2026-01-22T04:02:08.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T17:44:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2762"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:191ca7ff2973addc6e654d85d8c764128aa0f314f5733673f884726f65d39cef_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:1c8cdc119d2774968249e45f44d6c6b8db7be5d1722a10370d6a5d8a610bdad3_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/clair-rhel8@sha256:31d6f3852e464d9e691d671ca9e31c7ffb74eac660f2dc1d174eb9541f77025b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:27c6e90239456e04b5d4788207c4b93d2a501e054c531817a5d9dd1d3050e88b_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:085401485780294ee1030fcbcf9e5b27d424175539a3c6b58aa1510464506fac_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:aab02c5996a8fc6b4a5ccc4c5fe8e104117ecdfb89053ad76c243f098636bf47_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f7db77081450f895a76d5f2bd14801cbfba5aeb8feabc6488686358312a006a9_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:c5efa89a8889042a125561e20ce918feab88ed8bb2e82a6dbb8e63a48e188cee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:0ac2270f040425b228c5be29498fb3b7179cc1c2b89ffc498d0e533a1f215913_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:7fdd702d7a92b1ecad9e8aed2572c66144a8deb6b7796d422ae192442d35fecf_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-builder-rhel8@sha256:d8ed6625f531394ab4bad84d68e24226e887ecfbd09c57cc63e005879fb49525_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:f006b674a07b09680682842c3e0f6a543fb19865124bd0c23d3fe4faf75a86f8_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:0a1b0e6be074b935cc6dc0d4782cbcb0afa8e86e1fa1eda7a107994c933554ee_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:17cd981b26466b0ec48f051f9c9b9168af6780006031a128c7f7a03a5622b8ba_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:571a99e76806fd7d7fb805fac388fd450d9ef58a00a95f90c9dbdc32ed93c44c_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-bundle@sha256:363e7b4be994bc1aaae25be1b26e400631aad24e92a7a5ee7f9d2ca960cdb420_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:0d396616e44ed9de0e390c19cd893fb39681d32a99f30c0187dfa54f1089e980_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b6239fb3d5ff13816e8c348addba581070cf104a81bf9b2019841594f30980b_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-operator-rhel8@sha256:8d7b4ba73bc93b1bc69027d37a5bdcf43dbc31a06b5f592d36ac5b9d2641a839_amd64",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401_ppc64le",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b46b24ca0902be8f03b1ffa1b593ef55a4d92a9660adb4b8b4d0f44692431b93_s390x",
"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking"
}
]
}
RHSA-2026:2764
Vulnerability from csaf_redhat - Published: 2026-02-16 19:06 - Updated: 2026-07-01 21:42Summary
Red Hat Security Advisory: Satellite 6.17.6.3 Async Update
Severity
Important
Notes
Topic: A new release is now available for Red Hat Satellite 6.17 for RHEL 9.
Details: Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.
Security Fix(es):
* python-urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
* python-urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)
* python-urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
Bug Fix(es):
* Satellite upgrade from 6.17.5 to 6.18 failed during Pulpcore database migration due to incompatible versions detected for some of the pulpcore plugins (SAT-41761)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch | — |
Threats
Impact
Important
References
25 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new release is now available for Red Hat Satellite 6.17 for RHEL 9.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* python-urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)\n\n* python-urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)\n\n* python-urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)\n\nBug Fix(es):\n\n* Satellite upgrade from 6.17.5 to 6.18 failed during Pulpcore database migration due to incompatible versions detected for some of the pulpcore plugins (SAT-41761)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:2764",
"url": "https://access.redhat.com/errata/RHSA-2026:2764"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "SAT-41761",
"url": "https://issues.redhat.com/browse/SAT-41761"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2764.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.17.6.3 Async Update",
"tracking": {
"current_release_date": "2026-07-01T21:42:21+00:00",
"generator": {
"date": "2026-07-01T21:42:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:2764",
"initial_release_date": "2026-02-16T19:06:28+00:00",
"revision_history": [
{
"date": "2026-02-16T19:06:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-02-16T19:06:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:42:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.17::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.17::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.17::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-installer-1:3.14.0.8-1.el9sat.src",
"product": {
"name": "foreman-installer-1:3.14.0.8-1.el9sat.src",
"product_id": "foreman-installer-1:3.14.0.8-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.14.0.8-1.el9sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python-urllib3-0:2.6.3-0.1.el9pc.src",
"product": {
"name": "python-urllib3-0:2.6.3-0.1.el9pc.src",
"product_id": "python-urllib3-0:2.6.3-0.1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-urllib3@2.6.3-0.1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.17.6.3-1.el9sat.src",
"product": {
"name": "satellite-0:6.17.6.3-1.el9sat.src",
"product_id": "satellite-0:6.17.6.3-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.17.6.3-1.el9sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"product": {
"name": "foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"product_id": "foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.14.0.8-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"product": {
"name": "foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"product_id": "foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer-katello@3.14.0.8-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"product": {
"name": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"product_id": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-urllib3@2.6.3-0.1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"product": {
"name": "satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"product_id": "satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.17.6.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.17.6.3-1.el9sat.noarch",
"product": {
"name": "satellite-common-0:6.17.6.3-1.el9sat.noarch",
"product_id": "satellite-common-0:6.17.6.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.17.6.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"product": {
"name": "satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"product_id": "satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-obsolete-packages@6.17.6.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.17.6.3-1.el9sat.noarch",
"product": {
"name": "satellite-0:6.17.6.3-1.el9sat.noarch",
"product_id": "satellite-0:6.17.6.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.17.6.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"product": {
"name": "satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"product_id": "satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.17.6.3-1.el9sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.14.0.8-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.14.0.8-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src"
},
"product_reference": "foreman-installer-1:3.14.0.8-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:2.6.3-0.1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src"
},
"product_reference": "python-urllib3-0:2.6.3-0.1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
},
"product_reference": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.6.3-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src"
},
"product_reference": "satellite-0:6.17.6.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.17.6.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.17.6.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.17.6.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.6.3-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src"
},
"product_reference": "satellite-0:6.17.6.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.17.6.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.14.0.8-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.14.0.8-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src"
},
"product_reference": "foreman-installer-1:3.14.0.8-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:2.6.3-0.1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src"
},
"product_reference": "python-urllib3-0:2.6.3-0.1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
},
"product_reference": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.6.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch"
},
"product_reference": "satellite-0:6.17.6.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.6.3-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src"
},
"product_reference": "satellite-0:6.17.6.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.17.6.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.17.6.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.17.6.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T19:06:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2764"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T19:06:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2764"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T19:06:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2764"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.8-1.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.8-1.el9sat.noarch",
"9Base-satellite-6.17:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.17:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.6.3-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.6.3-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.6.3-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
}
]
}
RHSA-2026:2765
Vulnerability from csaf_redhat - Published: 2026-02-16 21:33 - Updated: 2026-07-01 21:42Summary
Red Hat Security Advisory: Satellite 6.16.6.1 Async Update
Severity
Important
Notes
Topic: An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.
Bug Fix(es):
* Clean duplicate erratum packages before bigint migration (6.16) (SAT-41984)
Security Fix(es):
* python-urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)
* python-urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)
* python-urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)
Users of Red Hat Satellite are advised to upgrade to these updated packages,
which fix these bugs.
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src | — | ||
| Unresolved product id: 8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src | — | ||
| Unresolved product id: 8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src | — | ||
| Unresolved product id: 8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src | — | ||
| Unresolved product id: 8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src | — |
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src | — |
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src | — |
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src | — |
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src | — | ||
| Unresolved product id: 8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src | — | ||
| Unresolved product id: 8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src | — | ||
| Unresolved product id: 8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src | — | ||
| Unresolved product id: 8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch | — |
Threats
Impact
Important
References
25 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.\n\nBug Fix(es):\n\n* Clean duplicate erratum packages before bigint migration (6.16) (SAT-41984)\n\nSecurity Fix(es):\n\n* python-urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)\n\n* python-urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441)\n\n* python-urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471)\n\nUsers of Red Hat Satellite are advised to upgrade to these updated packages,\nwhich fix these bugs.\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:2765",
"url": "https://access.redhat.com/errata/RHSA-2026:2765"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "SAT-41984",
"url": "https://issues.redhat.com/browse/SAT-41984"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2765.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.16.6.1 Async Update",
"tracking": {
"current_release_date": "2026-07-01T21:42:23+00:00",
"generator": {
"date": "2026-07-01T21:42:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:2765",
"initial_release_date": "2026-02-16T21:33:28+00:00",
"revision_history": [
{
"date": "2026-02-16T21:33:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-02-16T21:33:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-01T21:42:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.16 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.16::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.16 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.16::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.16 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.16::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.16 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.16::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.16 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.16::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.16 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "python-urllib3-0:2.6.3-0.1.el8pc.src",
"product": {
"name": "python-urllib3-0:2.6.3-0.1.el8pc.src",
"product_id": "python-urllib3-0:2.6.3-0.1.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-urllib3@2.6.3-0.1.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.14.0.16-1.el8sat.src",
"product": {
"name": "rubygem-katello-0:4.14.0.16-1.el8sat.src",
"product_id": "rubygem-katello-0:4.14.0.16-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.14.0.16-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.16.6.1-1.el8sat.src",
"product": {
"name": "satellite-0:6.16.6.1-1.el8sat.src",
"product_id": "satellite-0:6.16.6.1-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.16.6.1-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-urllib3-0:2.6.3-0.1.el9pc.src",
"product": {
"name": "python-urllib3-0:2.6.3-0.1.el9pc.src",
"product_id": "python-urllib3-0:2.6.3-0.1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-urllib3@2.6.3-0.1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.14.0.16-1.el9sat.src",
"product": {
"name": "rubygem-katello-0:4.14.0.16-1.el9sat.src",
"product_id": "rubygem-katello-0:4.14.0.16-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.14.0.16-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.16.6.1-1.el9sat.src",
"product": {
"name": "satellite-0:6.16.6.1-1.el9sat.src",
"product_id": "satellite-0:6.16.6.1-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.16.6.1-1.el9sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"product": {
"name": "python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"product_id": "python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-urllib3@2.6.3-0.1.el8pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"product": {
"name": "rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"product_id": "rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.14.0.16-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"product": {
"name": "satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"product_id": "satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.16.6.1-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"product": {
"name": "satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"product_id": "satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.16.6.1-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.16.6.1-1.el8sat.noarch",
"product": {
"name": "satellite-common-0:6.16.6.1-1.el8sat.noarch",
"product_id": "satellite-common-0:6.16.6.1-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.16.6.1-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.16.6.1-1.el8sat.noarch",
"product": {
"name": "satellite-0:6.16.6.1-1.el8sat.noarch",
"product_id": "satellite-0:6.16.6.1-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.16.6.1-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"product": {
"name": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"product_id": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-urllib3@2.6.3-0.1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"product": {
"name": "rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"product_id": "rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.14.0.16-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"product": {
"name": "satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"product_id": "satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.16.6.1-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.16.6.1-1.el9sat.noarch",
"product": {
"name": "satellite-common-0:6.16.6.1-1.el9sat.noarch",
"product_id": "satellite-common-0:6.16.6.1-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.16.6.1-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.16.6.1-1.el9sat.noarch",
"product": {
"name": "satellite-0:6.16.6.1-1.el9sat.noarch",
"product_id": "satellite-0:6.16.6.1-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.16.6.1-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"product": {
"name": "satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"product_id": "satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.16.6.1-1.el9sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:2.6.3-0.1.el8pc.src as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src"
},
"product_reference": "python-urllib3-0:2.6.3-0.1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.16-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch"
},
"product_reference": "python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.16-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.16.6.1-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src"
},
"product_reference": "satellite-0:6.16.6.1-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.16-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.16.6.1-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch"
},
"product_reference": "satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.16-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.16.6.1-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.16.6.1-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.16-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.16.6.1-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src"
},
"product_reference": "satellite-0:6.16.6.1-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.16-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.16.6.1-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.16-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:2.6.3-0.1.el8pc.src as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src"
},
"product_reference": "python-urllib3-0:2.6.3-0.1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch"
},
"product_reference": "python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.14.0.16-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch"
},
"product_reference": "rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.14.0.16-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src"
},
"product_reference": "rubygem-katello-0:4.14.0.16-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.16.6.1-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch"
},
"product_reference": "satellite-0:6.16.6.1-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.16.6.1-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src"
},
"product_reference": "satellite-0:6.16.6.1-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.16.6.1-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.16.6.1-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8",
"product_id": "8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.16.6.1-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:2.6.3-0.1.el9pc.src as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src"
},
"product_reference": "python-urllib3-0:2.6.3-0.1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.16-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
},
"product_reference": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.16-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.16.6.1-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src"
},
"product_reference": "satellite-0:6.16.6.1-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.16-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.16.6.1-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.16-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.16.6.1-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.16.6.1-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.16-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.16.6.1-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src"
},
"product_reference": "satellite-0:6.16.6.1-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.16-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.16.6.1-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.16-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-urllib3-0:2.6.3-0.1.el9pc.src as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src"
},
"product_reference": "python-urllib3-0:2.6.3-0.1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
},
"product_reference": "python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.14.0.16-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch"
},
"product_reference": "rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.14.0.16-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src"
},
"product_reference": "rubygem-katello-0:4.14.0.16-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.16.6.1-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch"
},
"product_reference": "satellite-0:6.16.6.1-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.16.6.1-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src"
},
"product_reference": "satellite-0:6.16.6.1-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.16.6.1-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.16.6.1-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9",
"product_id": "9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.16.6.1-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"known_not_affected": [
"8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T21:33:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2765"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"known_not_affected": [
"8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T21:33:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2765"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"known_not_affected": [
"8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-02-16T21:33:28+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:2765"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el8pc.src",
"8Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el8pc.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.noarch",
"8Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el8sat.src",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-0:6.16.6.1-1.el8sat.src",
"8Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el8sat.noarch",
"8Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el8sat.noarch",
"9Base-satellite-6.16-capsule:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16-capsule:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16-capsule:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-capsule:satellite-common-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16-utils:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16-utils:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:python-urllib3-0:2.6.3-0.1.el9pc.src",
"9Base-satellite-6.16:python3.11-urllib3-0:2.6.3-0.1.el9pc.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.noarch",
"9Base-satellite-6.16:rubygem-katello-0:4.14.0.16-1.el9sat.src",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-0:6.16.6.1-1.el9sat.src",
"9Base-satellite-6.16:satellite-cli-0:6.16.6.1-1.el9sat.noarch",
"9Base-satellite-6.16:satellite-common-0:6.16.6.1-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…